Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. 2020/06/18 05:13:45 fuzzer started 2020/06/18 05:13:45 dialing manager at 10.128.0.26:44561 2020/06/18 05:13:46 syscalls: 3085 2020/06/18 05:13:46 code coverage: enabled 2020/06/18 05:13:46 comparison tracing: enabled 2020/06/18 05:13:46 extra coverage: enabled 2020/06/18 05:13:46 setuid sandbox: enabled 2020/06/18 05:13:46 namespace sandbox: enabled 2020/06/18 05:13:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/18 05:13:46 fault injection: enabled 2020/06/18 05:13:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/18 05:13:46 net packet injection: enabled 2020/06/18 05:13:46 net device setup: enabled 2020/06/18 05:13:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/18 05:13:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/18 05:13:46 USB emulation: enabled 05:16:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000edff44944eeba71a4976e252ab2cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000081ffffffffffffff039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000000e6ff0000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) syzkaller login: [ 213.180441][ T6803] IPVS: ftp: loaded support on port[0] = 21 05:16:23 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f00000004c0)=0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x38}]) [ 213.327515][ T6803] chnl_net:caif_netlink_parms(): no params data found [ 213.434920][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.443135][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.452881][ T6803] device bridge_slave_0 entered promiscuous mode [ 213.462858][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.471177][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.480045][ T6803] device bridge_slave_1 entered promiscuous mode [ 213.511842][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.523953][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.558979][ T6803] team0: Port device team_slave_0 added [ 213.567487][ T6803] team0: Port device team_slave_1 added [ 213.597462][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.604952][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.632533][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.646203][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.651304][ T6949] IPVS: ftp: loaded support on port[0] = 21 [ 213.654365][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.686839][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 05:16:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x810fffb) [ 213.792463][ T6803] device hsr_slave_0 entered promiscuous mode [ 213.849053][ T6803] device hsr_slave_1 entered promiscuous mode [ 213.962939][ T6981] IPVS: ftp: loaded support on port[0] = 21 05:16:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002d0007d000"/20, @ANYRES32, @ANYBLOB="01000000000000000000f1ff"], 0x30}}, 0x0) [ 214.160810][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 214.429080][ T7214] IPVS: ftp: loaded support on port[0] = 21 [ 214.456117][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 214.486327][ T6803] netdevsim netdevsim0 netdevsim0: renamed from eth0 05:16:24 executing program 4: timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0x20}, {}], 0x2) semop(r3, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000013) [ 214.543226][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.555062][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.565701][ T6949] device bridge_slave_0 entered promiscuous mode [ 214.584994][ T6803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.647473][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.661533][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.679318][ T6949] device bridge_slave_1 entered promiscuous mode [ 214.730664][ T6803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.764910][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.781474][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.809838][ T6803] netdevsim netdevsim0 netdevsim3: renamed from eth3 05:16:25 executing program 5: timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = semget$private(0x0, 0x3, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0x20}, {}], 0x2) semop(r3, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000013) [ 214.933861][ T6949] team0: Port device team_slave_0 added [ 214.947555][ T7273] IPVS: ftp: loaded support on port[0] = 21 [ 214.994699][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.005084][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.013620][ T6981] device bridge_slave_0 entered promiscuous mode [ 215.031693][ T6949] team0: Port device team_slave_1 added [ 215.062616][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.082418][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.095589][ T6981] device bridge_slave_1 entered promiscuous mode [ 215.148815][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.155774][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.185298][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.216226][ T7322] IPVS: ftp: loaded support on port[0] = 21 [ 215.242723][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.252006][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.278633][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.301355][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.335671][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.437628][ T6981] team0: Port device team_slave_0 added [ 215.464078][ T6949] device hsr_slave_0 entered promiscuous mode [ 215.508429][ T6949] device hsr_slave_1 entered promiscuous mode [ 215.547918][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.555810][ T6949] Cannot create hsr debugfs directory [ 215.596478][ T6981] team0: Port device team_slave_1 added [ 215.606105][ T7214] chnl_net:caif_netlink_parms(): no params data found [ 215.653807][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.661203][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.691630][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.709703][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.716650][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.743243][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.850912][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.920174][ T6981] device hsr_slave_0 entered promiscuous mode [ 215.961553][ T6981] device hsr_slave_1 entered promiscuous mode [ 216.017776][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.025347][ T6981] Cannot create hsr debugfs directory [ 216.102976][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 216.186283][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.195016][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.246310][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.272614][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 216.308701][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.315766][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.324210][ T7214] device bridge_slave_0 entered promiscuous mode [ 216.362004][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.370919][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.380303][ T7214] device bridge_slave_1 entered promiscuous mode [ 216.388111][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.396695][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.409832][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.417086][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.430002][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.457116][ T6949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.532227][ T6949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.587197][ T6949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.673970][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.681357][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.690822][ T7273] device bridge_slave_0 entered promiscuous mode [ 216.706005][ T6949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.772701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.782282][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.791229][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.798395][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.812419][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.821278][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.831600][ T7273] device bridge_slave_1 entered promiscuous mode [ 216.842335][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.854272][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.926764][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.941550][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.951788][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.961605][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.031970][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.048193][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.055931][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.065913][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.074623][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.083198][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.096793][ T6803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.109738][ T6803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.118206][ T6981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.172195][ T7214] team0: Port device team_slave_0 added [ 217.178822][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.185896][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.194721][ T7322] device bridge_slave_0 entered promiscuous mode [ 217.206260][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.222212][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.231288][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.246400][ T6981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.301821][ T7214] team0: Port device team_slave_1 added [ 217.322857][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.331670][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.341184][ T7322] device bridge_slave_1 entered promiscuous mode [ 217.373924][ T6981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.430313][ T6981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.480471][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.487795][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.514500][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.539254][ T7273] team0: Port device team_slave_0 added [ 217.551590][ T7273] team0: Port device team_slave_1 added [ 217.581946][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.589003][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.616148][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.645299][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.653077][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.692207][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.702837][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.713711][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.739811][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.752787][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.763751][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.789828][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.839880][ T7214] device hsr_slave_0 entered promiscuous mode [ 217.888994][ T7214] device hsr_slave_1 entered promiscuous mode [ 217.927032][ T7214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.934606][ T7214] Cannot create hsr debugfs directory [ 217.942120][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.953458][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.044642][ T7322] team0: Port device team_slave_0 added [ 218.054816][ T7322] team0: Port device team_slave_1 added [ 218.100223][ T7273] device hsr_slave_0 entered promiscuous mode [ 218.137202][ T7273] device hsr_slave_1 entered promiscuous mode [ 218.187115][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.194694][ T7273] Cannot create hsr debugfs directory [ 218.246004][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.254986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.284989][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.293474][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.321256][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.334180][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.342056][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.368752][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.465470][ T7322] device hsr_slave_0 entered promiscuous mode [ 218.517172][ T7322] device hsr_slave_1 entered promiscuous mode [ 218.546736][ T7322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.555026][ T7322] Cannot create hsr debugfs directory [ 218.567747][ T6803] device veth0_vlan entered promiscuous mode [ 218.596049][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.605249][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.614855][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.623668][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.668261][ T6803] device veth1_vlan entered promiscuous mode [ 218.690494][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.847789][ T7214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.912889][ T7214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.940429][ T7214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.008099][ T7214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.067216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.074983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.093294][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.117935][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.144046][ T6803] device veth0_macvtap entered promiscuous mode [ 219.171742][ T6803] device veth1_macvtap entered promiscuous mode [ 219.181753][ T7273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.262045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.273817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.283346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.292578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.300839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.310663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.319772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.328511][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.335551][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.343681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.352654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.361382][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.368508][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.378481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.386668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.394822][ T7273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.438619][ T7273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.495875][ T7273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.550168][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.584775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.624329][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.638906][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.648555][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.659259][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.666397][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.674045][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.683516][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.692512][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.702225][ T7322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.773727][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.806695][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.814673][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.825320][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.842709][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.851963][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.860785][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.867908][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.875650][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.884588][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.893463][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.902136][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.911347][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.920307][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.929393][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.939899][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.949600][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.958493][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.967328][ T7322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.028501][ T7322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.119697][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.131552][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.143535][ T7322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.254194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.263130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.273490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.455860][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.467977][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.478129][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.485632][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.494504][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.510900][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.532012][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.567515][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.582753][ T6981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.597975][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.629599][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.650234][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.685606][ T8063] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.719159][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.749810][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.759178][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.775318][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.785423][ T2586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 05:16:31 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x325}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x320f) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x4010) r2 = syz_open_procfs(0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0x2, 0x2000}) [ 220.832820][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.852708][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.876531][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.883623][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.893199][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.902233][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.911976][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.919168][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.929436][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.937463][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.973176][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.987127][ C1] hrtimer: interrupt took 27603 ns [ 221.019931][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.035151][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.053103][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.066206][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.075178][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 05:16:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xe376}, 0x0, 0x0, 0xfff, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) mlockall(0x1) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)={{0x77359400}, {0x77359400}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24000041) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x4004000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x8005) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) [ 221.117475][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.125331][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.140195][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.149929][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.175199][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.196859][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.205433][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.221534][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.232329][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.243628][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.258791][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.287456][ T7214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.298603][ T6949] device veth0_vlan entered promiscuous mode [ 221.355879][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.364654][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.435378][ T6949] device veth1_vlan entered promiscuous mode [ 221.510657][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.614035][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.718340][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.729855][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.748458][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.782611][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.807837][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.843217][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.867227][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.878186][ T6981] device veth0_vlan entered promiscuous mode [ 221.933707][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.999712][ T6949] device veth0_macvtap entered promiscuous mode [ 222.022793][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.086551][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.094505][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.106397][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.115094][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.124155][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.132769][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.149314][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.162432][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.183109][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.194687][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.201900][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.265274][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.312864][ T6949] device veth1_macvtap entered promiscuous mode [ 222.343658][ T6981] device veth1_vlan entered promiscuous mode [ 222.395818][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.404091][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.447551][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.596612][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.613702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.640237][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.647392][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.705020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.713954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.751457][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.758620][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.792234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.816061][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.824595][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.831749][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.849093][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.863600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.947109][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.970323][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.993195][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.049493][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.073924][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.093546][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.103588][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.121449][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.133701][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.149995][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.162223][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.179284][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.192404][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.209764][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.222520][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.240389][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.283106][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.308571][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.329128][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.354353][ T6981] device veth0_macvtap entered promiscuous mode [ 223.374699][ T7214] device veth0_vlan entered promiscuous mode [ 223.393864][ T7322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.422568][ T7322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.452671][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.466748][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.489224][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.506448][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.525608][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.534129][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.552003][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.562009][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.578992][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.592457][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.608953][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.624635][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.642394][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.652649][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.719648][ T6981] device veth1_macvtap entered promiscuous mode [ 223.746402][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.754636][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.773006][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.783120][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.799795][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.811954][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.832048][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.851117][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.861275][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.886133][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.926703][ T7214] device veth1_vlan entered promiscuous mode [ 224.014621][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.039992][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.053600][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.075714][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.097380][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.183736][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.229361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.245622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.264191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.284214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.304189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.312253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.331336][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.355065][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.368223][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.380825][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.393589][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 05:16:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="f19b00b92bdf092459cce16b18dd87566eccc495ec8acabcd42631471ea0dc70aeacc6306c9123fa84d873e881d83aa01fa341766bdbe6f0ef8fb79fe331a6a3a3", 0x41) [ 224.506761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.520458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.545940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.553449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.577506][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.605200][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.637463][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.668732][ T7214] device veth0_macvtap entered promiscuous mode 05:16:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x320f) socket$inet(0x2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4010) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 05:16:35 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[], 0xfde0) [ 224.770205][ T7214] device veth1_macvtap entered promiscuous mode [ 224.919959][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.937445][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.942491][ T28] audit: type=1800 audit(1592457395.159:2): pid=8108 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15744 res=0 [ 224.979134][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.002316][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.022953][ T28] audit: type=1800 audit(1592457395.189:3): pid=8108 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15744 res=0 [ 225.049051][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.102754][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.122951][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.141129][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.152882][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.184275][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:16:35 executing program 0: epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0x6a) [ 225.202148][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.220575][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.262922][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.295547][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.313919][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.325522][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.337521][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.351406][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1 05:16:35 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={0x0, 0x64}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x2090}, {0xffffffffffffffff, 0x301}, {r2, 0x544}], 0x4, 0x3) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) [ 225.362031][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.373330][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.425491][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.440832][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:16:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f00000020c0)=[0x0], 0x1}, 0x58) 05:16:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a051400000000000000000a0000000900010073797a30000000006c000000160a010000000000000000000a0000000900020073797a320000000040000380080001400000000008000240000000002c000380140001006e657464657673696d3000000000000014000100697036677265300000000000000000000900010073797a3051000000140000001100020000000000000000000000000a"], 0xb4}}, 0x0) [ 225.531196][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.568801][ T8132] FAT-fs (loop1): bogus number of FAT sectors [ 225.576362][ T8132] FAT-fs (loop1): Can't find a valid FAT filesystem [ 225.595488][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.739931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.757817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.796587][ T7322] device veth0_vlan entered promiscuous mode [ 225.822639][ T7273] device veth0_vlan entered promiscuous mode [ 225.917803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.930724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.959515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.012963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.077833][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.108589][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.208894][ T7322] device veth1_vlan entered promiscuous mode [ 226.247573][ T7273] device veth1_vlan entered promiscuous mode [ 226.367966][ T8147] FAT-fs (loop1): bogus number of FAT sectors [ 226.373135][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.377841][ T8147] FAT-fs (loop1): Can't find a valid FAT filesystem [ 226.393518][ T7322] device veth0_macvtap entered promiscuous mode [ 226.402589][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.411961][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.420437][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.430892][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.439617][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.448697][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.459111][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.472907][ T7322] device veth1_macvtap entered promiscuous mode [ 226.479688][ T28] audit: type=1804 audit(1592457396.689:4): pid=8151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir691919801/syzkaller.POoWIC/2/file0/file0" dev="sda1" ino=15752 res=1 05:16:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000005144502"], 0x20}}, 0x0) [ 226.565910][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.621090][ T7273] device veth0_macvtap entered promiscuous mode [ 226.643591][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.645588][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.663171][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.680331][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.704023][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.713850][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.748728][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.782211][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.793805][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.814345][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.847822][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.865663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.884868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.893588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.909866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.923473][ T7273] device veth1_macvtap entered promiscuous mode [ 226.953304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.970527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.986761][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.997785][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.008047][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.022948][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.033018][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.043608][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.053651][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.064341][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.076101][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.092360][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.101971][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.212467][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.224739][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.235142][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.245677][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.255970][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.266469][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.276451][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.286939][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.296879][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.307352][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.318883][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.329883][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.339688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.350616][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.362764][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.373437][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.384711][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.395080][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.406062][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.417641][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.428550][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.438862][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.449847][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.461488][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.529891][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.538902][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:16:38 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 05:16:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[{&(0x7f0000000280)="7c8eb85093525678c6c1e439d4adab75f02402bbdee0521f40fc0dd8a1dacfbcb4209c44e958118de280563533f1a7d41f39591239be6efd96156350dbefdb029ea27c0f12463cb7c40c0547ba9e53e5076fd4805c4647ad4d43b27ae4a03ce6f7d5effb31c927a6d28c77385519d7f19ca6b96415dcc8b837aace69d5e1d6d4c45afd6d4ef0e79c4a", 0x89, 0x7}], 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r10 = socket$kcm(0x2, 0x3, 0x84) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty}}}, @ip_tos_int={{0x14}}], 0x38}, 0x0) 05:16:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) 05:16:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x1}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) 05:16:38 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) socket$inet(0x2, 0x2, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x80) 05:16:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601020020010004000da800000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100000002) [ 228.032289][ T8180] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 228.141779][ T28] audit: type=1804 audit(1592457398.360:5): pid=8190 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir949546494/syzkaller.cuY6Of/1/cgroup.controllers" dev="sda1" ino=15772 res=1 [ 228.180182][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 228.203126][ T8192] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 05:16:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005100000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 05:16:38 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='hsr0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 05:16:38 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0xffff}, 0x9c) 05:16:38 executing program 1: 05:16:38 executing program 0: 05:16:38 executing program 2: [ 228.415889][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 05:16:38 executing program 0: [ 228.470712][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 05:16:38 executing program 1: 05:16:38 executing program 4: 05:16:38 executing program 2: 05:16:38 executing program 0: [ 228.795511][ T28] audit: type=1804 audit(1592457399.020:6): pid=8188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir949546494/syzkaller.cuY6Of/1/cgroup.controllers" dev="sda1" ino=15772 res=1 05:16:39 executing program 5: 05:16:39 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x325}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x320f) socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2408c840}, 0x4010) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)) r5 = syz_open_pts(r4, 0x4000000000010002) dup3(r5, r3, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)={0x2, 0x2000}) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 05:16:39 executing program 3: 05:16:39 executing program 1: 05:16:39 executing program 2: 05:16:39 executing program 4: 05:16:39 executing program 5: 05:16:39 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x325}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x320f) socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2408c840}, 0x4010) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)) r5 = syz_open_pts(r4, 0x4000000000010002) dup3(r5, r3, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)={0x2, 0x2000}) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 05:16:39 executing program 4: 05:16:39 executing program 1: 05:16:39 executing program 2: 05:16:39 executing program 5: 05:16:39 executing program 3: 05:16:39 executing program 4: 05:16:39 executing program 5: 05:16:40 executing program 2: 05:16:40 executing program 1: 05:16:40 executing program 0: 05:16:40 executing program 3: 05:16:40 executing program 4: 05:16:40 executing program 5: 05:16:40 executing program 2: 05:16:40 executing program 1: 05:16:40 executing program 0: 05:16:40 executing program 3: 05:16:40 executing program 4: 05:16:40 executing program 3: 05:16:40 executing program 2: 05:16:40 executing program 0: 05:16:40 executing program 5: 05:16:40 executing program 1: 05:16:40 executing program 4: 05:16:40 executing program 3: 05:16:40 executing program 0: 05:16:40 executing program 2: 05:16:40 executing program 5: 05:16:40 executing program 1: 05:16:40 executing program 4: 05:16:40 executing program 3: 05:16:40 executing program 0: 05:16:40 executing program 2: 05:16:40 executing program 5: 05:16:40 executing program 1: 05:16:40 executing program 3: 05:16:40 executing program 4: 05:16:40 executing program 0: 05:16:40 executing program 2: 05:16:40 executing program 1: 05:16:40 executing program 5: 05:16:40 executing program 3: 05:16:40 executing program 4: 05:16:40 executing program 0: 05:16:40 executing program 2: 05:16:40 executing program 5: 05:16:40 executing program 1: 05:16:40 executing program 3: 05:16:41 executing program 4: 05:16:41 executing program 0: 05:16:41 executing program 5: 05:16:41 executing program 2: 05:16:41 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x20000004) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="45e15358fd00fbf3081cce145ee5ecfe68a8d6b97809492d1557de782511032381d3b52992f1e0432e9268cdbec4cffebb2c761650c6fe74acafd4daaf5e8e0380578727116ec780d5658ce0130360851c88657511a16cac94c4d9839d26b2369f1ec9279dc90138df3234d8add5bf7da7397e574a05776dafcbde33a79f5db938e6c2355b64d5985daca409f73d3011892c5aee15a4ec7e"], 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) 05:16:41 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x320f) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) 05:16:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000280)={0x0, 0x20}) ioctl$EVIOCGMTSLOTS(r0, 0x40104593, &(0x7f0000000280)=""/217) 05:16:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = dup2(r0, r0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000019c0)=""/4094, 0xffe}], 0x1, 0x0) 05:16:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc004024}, 0x0) 05:16:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x14, 0x0, 0x201, 0x0, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2200c044}, 0x1) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000440)=r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20a001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x4) accept$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@null, @bcast, @remote, @remote, @remote, @default, @netrom, @default]}, &(0x7f0000000240)=0x48) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000400)={0x3, 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x800, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 231.037596][ T8304] FAT-fs (loop1): bogus number of FAT sectors [ 231.050879][ T8304] FAT-fs (loop1): Can't find a valid FAT filesystem 05:16:41 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff018000003b"], 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x30, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x800060, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 05:16:41 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r1 = socket(0x10, 0x80002, 0x0) socket$inet(0x2, 0x80001, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000100)=0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b4f003e00b0b9cad4a128"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000000000), 0x4924924924924cb, 0x0) 05:16:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000095010400140032800b000123c3841d90d857ce01040002800500100006000000"], 0x31}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="e5fe000000000000000402"], 0x14}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000200)=0x60, 0x1000) bind(r7, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000828bd7000ffdbdf250300000006000a004e24000008000b00", @ANYRES32=r5, @ANYBLOB="05000400010000000500020002000000060001004e20000008000b000a2a7685d09c9ebeb94aa4b791bd2bad1a053d11a006d46691137b566ade7d0e69021d47f1ec83a305832d591f5cbdf3dbfb5c0039da5f52050d57f58b061c5bd77a59f6a645fefe175004eabb73c770cf95ec60bb9b01df76d9d0c1400e2eeb8229962b5414c799900f7a3dca29de6fb01d269238e98e94bc5fd0028c695b8536c658a1e9e96002179de3f6c763fe8014b6fd937aaed9294b3ca6a915", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x54) 05:16:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x19}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x5, 0x9, 0x9, 0xfffffff9, 0x3}) listen(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000085, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) shutdown(r4, 0x1) r5 = accept(r0, 0x0, 0x0) close(r5) [ 231.494063][ T8331] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 231.571180][ T8331] device bridge0 entered promiscuous mode [ 231.609930][ T8331] device macsec1 entered promiscuous mode [ 231.663946][ T8331] device bridge0 left promiscuous mode 05:16:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x37009d8625a2b968, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 231.871031][ T8347] FAT-fs (loop1): bogus number of FAT sectors [ 231.907097][ T8347] FAT-fs (loop1): Can't find a valid FAT filesystem [ 231.994803][ T28] audit: type=1804 audit(1592457402.221:7): pid=8350 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir691919801/syzkaller.POoWIC/15/file0/file0" dev="sda1" ino=15800 res=1 05:16:42 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='{d=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x4}}, 0x50) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000100)=0x10) [ 232.301243][ T8359] fuse: Unknown parameter '{d' [ 232.610721][ T8361] fuse: Unknown parameter '{d' [ 232.632448][ T8333] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:16:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088", 0xb1}, {&(0x7f0000001500)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7dea", 0x3e}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6ff25f6c4177fcf5384847410058370b", 0x78}, {&(0x7f0000000080)="9c5963ce9528017c", 0x8}, {&(0x7f0000000040)="328da01e65d586a9c68a28f1b6767f0cf53ac14b8dcb6f7c26d8e51a4603000000", 0x21}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="6048ce550fb3b26995c145bd0ae6da892b4244d894d14372cbc054cdbd281232cb292864f82755210be8ca8e2f8b782d3866251c259386b4f68545062ac0f3768848ce309fe0a0796f2d6d6b00781a14acf17c0a139e60b7b2c3cd78730b33d6eeb7012768a633a4455020a5f9f0174211a044106cbc9a1bd6dd3b6acd6a9554895e552d8ab2aae1ef0e28b1c12cada099e39c58ae5e636d5322270e9cc3700bb0881d783052c68d93ee4438160a42930693bb4bb362805eea14c61898d826c32b27b0115503a9c75eb9e8ba510d2144ae6c53af216afe49cf3c8269b380cd7600"/237, 0xed}, {&(0x7f0000002240)="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", 0x5e8}], 0x2}}], 0x3, 0x0) [ 232.688982][ T8344] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:16:43 executing program 0: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'fo\x00', 0x0, 0x3ff, 0x40000}, {@private, 0xfffd}}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x420200) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000140)=""/70, 0x46) 05:16:43 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) read$hiddev(r2, &(0x7f0000000100)=""/69, 0x45) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$int_in(r1, 0x800000c004500a, 0x0) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000002200)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 05:16:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x76, &(0x7f0000000140)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x80000001, 0x20}, &(0x7f0000000040)=0xc) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r4}) 05:16:43 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x9, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x83c4, 0x8001}, 0x2, 0x0, 0x0, 0x0, 0x80, 0x82}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x3138c0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x8, 0x2009, 0x20000000000001, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x40) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r3, 0x0) unshare(0x42000200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)={0xd004, 0x11e000}) r4 = accept(r3, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') write$binfmt_elf64(r4, &(0x7f0000000680)=ANY=[], 0x3f00) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 233.022114][ T8379] FAT-fs (loop0): bogus number of reserved sectors [ 233.028722][ T8379] FAT-fs (loop0): Can't find a valid FAT filesystem 05:16:43 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800178008001c0005000000050f260001385d00000000000073000005002b0002000083724bc65f0357a0444585f80d5400050017000000ac", @ANYRES32=0x0], 0x70}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) [ 233.130882][ T8387] IPVS: ftp: loaded support on port[0] = 21 [ 233.183637][ T8393] FAT-fs (loop0): bogus number of reserved sectors [ 233.197010][ T8393] FAT-fs (loop0): Can't find a valid FAT filesystem 05:16:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) setuid(0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x341001) faccessat(r4, &(0x7f0000000040)='./file0\x00', 0x87, 0x100) [ 233.265651][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:16:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x220982, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000080)=0xa9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="360fae8cc7000f59d866b9310b000066b89e00000066ba000000000f3066b9940900000f32bad004ed653e0fc7280fc72abaf80c66b83162e68ee9e9efbafc0cecf6e166660f3882790c", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 233.576213][ T8414] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:16:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x0, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) pwrite64(r3, &(0x7f0000000280)="b6a998b088568e8da0cded575b8a710ba65b784c159a9510b43afa64c6e667d205bd7318196b40091dd8d3298799602ebd1f91143cc959fa488617851fcbdeec271355faf6d21b3fe384aa52ce5de0beb4b32b24d6bb8159175db7de1adfb4c7a8e9f05ca1221ebacf4089f2140f1592e0b31bfdff20d7d0af824da05d064e5335d15867a91f2e84957f73896ce57930dcbdb8631a37d417ecc53a5957b85ab6bcfa208b3dc71a8b43b9db7f3ef58ec6b15228fbba467b134ccc219e8c27249f036c98efa2e320e0f2b859ab16fb3dc4c34f7da033e15addc6cfa19b5d21bac40ae4bac7292590809d1219f8418fcd1d7ed7062a74ee560022ad9ae29bbfde05eb23e335deeb4d93db10810f77486318b46f202cd962f985b6df7537c43fec45fe0d7a295e9c3bb5e747006dd16b9c9e592adc025955f7af8f1336f4753a5cdd8320ef425bc0eda59274fdb0ad95d9093cddc51bf9977fe9c564dcac5b861a8e07971a0d6f1c45635f4f02810835ec993aec018c6da0272b7cb05f75c0231f8d258ffde85b965865d84f7d25c42e2be48ff9f50e449e43821520e05fd9369ad8b6b5238027d408ad1e8c70f85bb7f5f2162e16641426313deac1a46fad40c831d221ec342794b4642124bfe56a31b3a2caf223c1c75932c3b1e74314080f64accbca46e9ce21a0c880600f4b163d1e980bb74a93fc552a3cc3d04af9a861ccee30b9cb9513f16923cc23a290d49c9182dac7bdc50517d990fe7bbe8daff262bcf8cb2c288eb4818ec9b1c0e9859b144e66d0b216ea08391762e007e763f29310ffead03650be514357cdd8bac1ee7e3fa82ed864bbe214bdfb6a4a1c3794328fb3d58e4e71882520b6b2bc3736cd92c1e980e42fa8052cfa9e5ab3c9687008f257ad041af7adaa450450d9e70e2152ddadb7a339b1b590a0ecefd49df1a21b53f7e4f3ebe05fdd2706c072aebcbaf54e8ce2d9f93ba82d1f0ad56b8ad70f7f9ddb068bb78733e1017d73b4b87fc2d2a8e4ee1feb55ff6464e76ec51cebb985e9742259cce1f6ddc7432571affa82404069832e6120a2398c8ebab9660471f3db932b42885b16e16ef59f5089ee36287d4059b585dc8f05b6efeec22fb8f93b95ee73b75fa826f7cc495726d489ecb7250b766c6009e891475d6b4d1e0b40601e322197dc3c7b89d72a7bd84876301012e806154525a6bf73f1f2af747a9ff369638c63b7500975efcd7d79c1659aade6ffd30167b06a0edb002cea8077231291ce63a942cce3bb13419ec78434040e621c33b05d6fef5d39583b444f226bffd6fd9cfafffa9f5a2214e99f8232caac5731bcffed826049a28ce26cce35d748fde6a7ef4915810b8c6f0d5774c0c4a9b989dc92f857af5f5db1dde875dc9e50f837e2d67a81ad643db46494894b179d14e369319e6a2478f3e723844ae6945bf6f58d045535294f5819feb3151efa63090aa99057ae8c54cb2f9a0efdc9b667fb9f2c8ddc1a91f426daaed32d606c9b058711357fb9daeaa9b38c6c2fe4ed9882f0525f3a81aab112a86cb7635b2ad96cd57db4943267b74ca7747581aa421e40ccb49c29378fca8b97938384100c22ce31205169ce2a99736a8c0a29b4c756a5b22bfb901c31f9d78dc015701c8b717961817a944b06fb1df348852a77c8150e4ced6a001cc133b50730f6063da0aba804d600b6e10e5c568c5e06d616645a5f2dbf0a7075a781ff55481aa39bc798317dcad6974e427ba9e622d6bfe4c8b600678ef78aa601f464ad8bc4f7972f7cfdb0db1b882f124d512c8901852b666b94f8d75411fe484c7eb35ad24104dce3e7d8cf863ffd62495a2e84898b249d973f109561178b8f8ed13ee4528dc09b5f4ceabe18e2db7ff6db959fcbbee6e6560f27e1de167597a22dce243b67b1242e02061eb380ddbb3740cd61d3bbd44f056c98180510ab13d5adebf8fd63b7d3c05f99813a78b83c45ba795ac33c7d4ba11141e880fa8fc6f6e2cb906193166bed611c1e8b0578ad795742dadf21b17caaa49af95eb60fd4dd2598cc91fb5b87dafe14623290a7dc3524a8b7a570a6300a0e35678d51bf56fd2ad306206b71c34b59322e27bbdb8383812b3fc892c6ae586795270ca37b0955bc48aea60ac4f32ad23418eb667a043b4d9ff2dae66296057999aada15278a34613acc0b3450d7be9c51f8c4d77247ebd861202808184dd9c98ec8189cc009efb86785f9494fce57211ca38eb8c7eaed3fae27592f2c1094972ec039998f40bcaa40292917d683fa3978597f483bed8a8951526f22fc0c1a248f0a73e8a92c13503e8076f1b538590f16286fb39cffdf0547f9f5c61a1fce5f8b265e540aad6320694d8724a81850292276683ad57970aa6e37bf4581afeeddb37b580db02ac021c4f93e3a4b8ae97f214f8d901dc62085990d4d3b3e79c7a7b2b18b691f7167cdb82b3bb57dc8fe3c2f87d05c7b58c967b6de30d433c769fd852ebf43edd45b104241b0e51d3827bae90fbc58a976264905cdd81dd3da0177c09f180828adba437e96f917870e3f094f9a60bb2384e0c1c041a32198aa37eb5b5b693a7ff34641207cc3c4d0b17f5794656067de3cb3d6da3e45dd1205cebfaf132d34babb4e9bca721ef05ea80d4472494869abdd91e93342ae547d4118f310cd6a7e91876c3ee4249373fee0f4f3f3164a714bf28741d5c80c9b8e4d7769a57740fa432bd01ee99987b5627a6bb81da30839d30189f8c0340b6e0afe27780b018cddd177a73ecfaa9f7169afb1f4fc66fb35c8e76a8d8397b5138a51f78198265f38a4f3730c7d9771050efed96129ed2944a6652be1277b67b8011fd93f24af816022713b95f8177146402128851c113338f1662c9eea21626162c8dcc1b347c6cb2c869cbf1696c933a4aed916d9f22fc0e45dd162fa23079f47921c7471ddec1f1220aeb4c8e0ad14e5e4036a1a831744bd02747281e90e89722919147fa108db7134f8fb8480490ad03cd803d79b7aa839f608ee8da55981876322a7ee4d5f70f3e03eccb53f76fe2c3bdd69ebd5a4ddc57d60ce5e0c2cacc0d8a982bc0cb20b7a3baaefc7ce125b69e66f930c333007e5316a7e4543c8b3c6f6119979573d987a90acc921e94be2f20538a0d18b4ac8cb5c01f9913ecc9b7d84d341ff704fa462db38a90efa886b4be3610ea907dafc3783f8ba06725e8c24dd5e6487874134f20985942eafa010d15248fcb68de956d9931ca9cdb85cf3f62efedc01751ee462b188f097285caeec4b47fe1040d7e3924c0b36cd63d208ad6c558bc7655c4f314c2a8a8e35d9846746ce4bfb42396778dc886592f8b4e0db4fe18998d9c604191812b7b431cf2cc199e302243bf9b152987dfec85d9e1ce4d2b498a2f0a4a255f339868486bce18fc66d72424f0983f4d4a1fe0d59610fa9642639c5540f23d00cbe814a21d1fd5e3f303ee81c7390472d12842d0cac246038a51ea73a67ebc234cc35f16333275cd33a84e3c2c0e9750b79e00bcf3ec9230af8486d3c09db4f389be51d25b2cb7b7178c7584ae19a97ea1d0d721a9517b9c34d0686e9021e2708a2e2548d28c0078f967c0890c115357b0145c93a1daa0ff9cb53fd436bbbcd81d2eb546c29c6a3a823fb43fcaae7cbcd3f0b874d3be600e4ccdf2570797cd7055989cd3e69e00686cd7f78f1a902b45d2e5206f6eedaa34186f3fb7da25cd9b371807d043ff50104d4fe9acc11b76b45b6fdd8179331f49e5b974aea072538ee579394929043cabde88d8bd2b08800275533aa8c260373ac3bde4f2e6f1ba4a38869dfbb6d46f3adce40bcdc99cc26457f3f6b58ab43267754b0dff0f8e5c54028960576167c61383b7dba21e2a1e2cb225ada4be5ba8a7e7b29d24232b3cab4d82f1f82ce6b040173e31d1219ce58b006faf24ad273a425f434d30a555cd641d9e4dc8476fefe28575a39b7f0e84f9287e7251d41eeb718280fd346293ca5e244222e151c0faf47999cdf470b3717cf7a632a2107a74a77e9236b92a10dc304774e0510b987ca61f275e7ff6cb100d0c05ffb2ccb8dbe65eb5507ba269b0c39f25c01a606c02cec3e3c80e4d37ceff55d3e39daf7352400e1d673b9b07369f3364e2634c57f7c3c9c6cd822ce9972442524f7669a3eb01f49b0f2e821e2d52ab1e46983108e4a41f736208895e7f72c081b62949b4995d536661983e0b3e539fc33703a846cdd0a7a79ecd8a24b7d433ef1f4a392fb4f15d1dd6d5ec438941b52a7e1962c7481f8f0bd79dbc527886bb3e688809178cf2b3b39382c35eadb1631511cc34730b3d463dc51479b9d8ae8c506f188a9d637a447fe95a1a2b31c1cc7794b59449dc2f29d0bd193309e481fc250f26ddf4019a88f07d9e8235b6fb3b49889ddec8319c23e416d4d2d38f7e112e9699b28724a1868785fea1e94baa2b215ec24ecd21d54e1f4e6c8d05c170d7fbc971e5116b9f7403b7feb9fa1fdc1e1b1ab62a09add48fc24d21ea07c41a8ffbd9c621bc563481bc1dc519ea69fcbcdf2636047a1c47e9fc2a29cead540037cb7da585db3cfd034f3b4c3e46e9b69ad851fa2899d4e6ad3d0332b3a4bf99c37d44a036b780b38a1c564f4fdda3ad4d6d38384e75cb838a35caf1ee7c45fea4ffc33079a9f20bcd63fece8f769ca11d592a1f6c785259d6cf815d1f95c2f5a569ca9c7076ea8088542cd492c60ddb37fcb7d08050a0f722101207843847e3f77a2c43114cf1b3d1c6f4e0447fa53204ee1d2c1d8e4428d8cad19f3b77b0b76ada7e25b5191a80df7124cc3aa0379d1c5ee6ddf9a269ba272a22f4fd26e26418ad8322d13a4eb4563b43a1004763e5c30aed1b42d015d53941f838b22b77078240cd3b30aea11c76b67b7742b6480b8f705ce55eae52756be03c149039e76602ac91e2fee0506afd3a67cc838f70f32607e5de1188aa00d0db5d7883fd364f8a7e65f17d8ae9e2f40468ae49fa33f2fea5d091083e7b4a7a57ae7328d6f1f5ff9ce391dc3977c02e89644d101bdef10ceb87f4396e5e118f3f6c781cfee96d32c38263d3f5d5a5b04867bf585de952c8ec6d62e34e4782381711a7095aaa31ba4736f10035420e04f8f60e4b0d7a0d0e65838f1a595c70bfb954b132bcf650606d7626439a80f7dc6c4d94fdd93923cc7c96a2a8c05660cea485ae86034ec3fd8b77717b6d1cae2a00844d202ee8aedbad63177cad696885135476aae4c9500ac221bb1f547a9ed5a6e07a6e6926a2510aeeabf3623ad5009d9b5e4ac234592a160a0f6c835fd90ce1deedfddbd41287517ee0b010b59e7a4ba6e4d244f048feef79caff7d282e0498da077293d9546aa524900b1b5f69a5413642b60e04c3eed87c024d6e62fd06882cb86d82d3aec525d2f81be87151bc48a322fa741c06cc8a911ddf766b5160ba7baacf06a5744594cdab0da8ec82e2c37b1b5417e7acc01d9ca41a63f1d1ae8e565184bcf7e7aee28f8566dbc8dc33dffad47a80fc2f0cd1960d391c6529e4be77d427df6e03b99a8cd29e95e457c76dc96d3ab0dede8d971907199340deb4fb89286493de76b0b55bf7d21c543ece3c0808757812d018f7f074647e613b2f8a0398e65026de4e27fe3f49537d5359a7461bf22f10818ccf3093b51df31a462569c5fe826f50b810f3f3b1d63d77032fe6cc04e03ffcb01a74501afec51bd9bdeca73c362ab343dc0accab0552517ffcc18c32f9ab5ba527d0554eac37d62020b87908fe0984344bbddaa0afe3ceed42acccf244f8d65b6718c1e86c537e9c141", 0x1000, 0xa86) r4 = fcntl$dupfd(r0, 0x0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) [ 233.714366][ T8401] syz-executor.4 (8401) used greatest stack depth: 23112 bytes left 05:16:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x4c000) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x1f, 0x3f}}, 0x28) 05:16:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0}, 0x10) close(r2) socket$kcm(0x10, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) [ 233.885697][ T8441] IPVS: ftp: loaded support on port[0] = 21 [ 234.056831][ T7] tipc: TX() has been purged, node left! 05:16:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x0, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) pwrite64(r3, &(0x7f0000000280)="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", 0x1000, 0xa86) r4 = fcntl$dupfd(r0, 0x0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) 05:16:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x9, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x51e}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x20040855) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x800000008, 0x0) 05:16:44 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) fstat(r3, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x1, 0x5}, @mss={0x2, 0xff}], 0x2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r4, 0x0, 0x8000fffffffe) 05:16:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0xc22d, @local, 0x40}, 0x1c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001540)='/dev/ubi_ctrl\x00', 0x60100, 0x0) sendto$ax25(r5, &(0x7f0000001580)="e925986842b0bc13635eefe88e6e2b8ea3ea4981a643635da92be87091706300ee605d5166f7a1f442075660e825b1beb360dc40bd581652a7fd71712fc99944887ec5dd8195ecd5d0d7d80dccbf8d81d7941670b006f1d5cb68a8255fd985a433057220d609403af6c48deced0fc1456751aacca719e2a8f9b01d8488fe66fac8bcab8651ec1a17b16bf6bc74e107139983d4aebb7feecdaf9dce6ff0f0018287cfe6fc3200e772d81c9e8b05dd06dd0cf08e0159892429", 0xb8, 0x40080, &(0x7f0000001640)={{0x3, @bcast, 0x8}, [@default, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 234.440464][ T28] audit: type=1804 audit(1592457404.662:8): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir124432784/syzkaller.h9HQ6d/26/bus" dev="sda1" ino=15813 res=1 [ 234.795237][ T28] audit: type=1804 audit(1592457405.022:9): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir124432784/syzkaller.h9HQ6d/26/bus" dev="sda1" ino=15813 res=1 05:16:45 executing program 4: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x928842e601c2df0c) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000280)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7e7d, @private1={0xfc, 0x1, [], 0x1}, 0xe}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x600000, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="02074f0802000000a8a9a92a4bbbe396a52bde4faa7e5a796aba4a02f1d11b31403a7cafaf9fc55611578f5d69282730ec598cdf7a66c3d142a6937b44a5305ff852145ac870acdc0ef20f4843b4645dca0874bb44e41d9ca5b59bf974c33f52b42ed0e1371e9541b7eb1cec"], 0x10}}, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) fcntl$notify(r0, 0x402, 0x928842e601c2df0c) 05:16:47 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x9, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x83c4, 0x8001}, 0x2, 0x0, 0x0, 0x0, 0x80, 0x82}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x3138c0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x8, 0x2009, 0x20000000000001, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x40) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r3, 0x0) unshare(0x42000200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)={0xd004, 0x11e000}) r4 = accept(r3, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') write$binfmt_elf64(r4, &(0x7f0000000680)=ANY=[], 0x3f00) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 05:16:47 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="857e00000000000000000f000000f13d5d8847e8269c26ade9488a9e5e32e6f2f228fe416dabc44cd940a1"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4841) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x6c, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbc6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) 05:16:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x40, 0x6, 0x0, 0x20, 0x0, 0x3, 0x20102, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x40480, 0x6, 0x8, 0x3, 0x9, 0x200, 0x4}, r0, 0xc, r1, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x101, 0x80) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x80000000000, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x3e9, 0x101, 0x70bd2a, 0x25dfdbfc, {0x20, 0x0, 0x1, r3, 0xee77edd, 0x3, 0x7fff, 0xb8a1, 0x0, 0xffffff47}, [""]}, 0x38}}, 0x81) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000003c0)) 05:16:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000680)={0xa30000, 0x6, 0x400, r1, 0x0, &(0x7f0000000640)={0xa10901, 0x7, [], @string=&(0x7f0000000600)=0x5}}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000006c0)={0x9, "000498"}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x1a4, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc0}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3e6a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffc9e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x73}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}]}, @CTA_NAT_SRC={0xb0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fff}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x38a}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x457}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20008040}, 0x24008001) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000002c0)=@newtaction={0xe4, 0x30, 0x53b, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_connmark={0xcc, 0x1b, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb67, 0x6, 0x7, 0x1, 0x4}, 0x3}}]}, {0x7d, 0x6, "aaaa8fef5e4a09ac83c04088497e9cd28e5554d8119e94c49a264490ede22bc3e54e42341f6f4d803d98a62f729e5c860862c6587652ab9878ff2fbb05b20445ba0ef9be27eb9a5305f82151dd7696f5aef61d149983a0dcc7a40799927ef67d61e9a19a504ae8d5c37cdbea62976f915570f52c0041e7c29e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xe4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000000)=0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x7fffffff, 0x6, &(0x7f0000000040)="d1f6edf28fa4235ece561cb3f23bee7c35a0c91e8dd3adc242cd06b94752afa9576b055bd1746cad65f2dcab218194beeabdac0608bf0f5652bab45911cf74b6d157db07e58d8bbfa15f90a1391f"}) 05:16:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x1040, 0x400fffd, 0x800000, 0x0, 0x0, 0x0, 0x1ff}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000340)={0x0, 0x0, 0xf8b7, [], &(0x7f00000001c0)=0x1}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000002c0)={0x1, 0x1, {0x0, 0x3, 0xc8, 0x2, 0x3}}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = accept4(r0, &(0x7f0000000380)=@alg, &(0x7f0000000400)=0x80, 0x80800) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000440), &(0x7f00000004c0)=0x4) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000240)=""/121) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000180), 0x12) [ 237.723384][ T8560] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.857075][ T8566] IPVS: ftp: loaded support on port[0] = 21 05:16:48 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000894) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) listen(r1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80800) accept4(r3, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x800) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2c6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xffffffffffffff39) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:16:48 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$jfs(0x0, &(0x7f0000001280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB='\x00']) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x668f00, 0x0) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000180)=""/3, &(0x7f00000001c0)=0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x1404, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x20008054) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xd8, r5, 0x300, 0x70bd2b, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1a}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:system_r:kernel_t:s0\x00'}]}, 0xd8}}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 05:16:48 executing program 3: r0 = creat(0x0, 0xf1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="857e00fa0000000000000f000000f13d5d8847e826ff0000000000000032e6f2f228fe416d8ee8ed112608"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4841) pipe2$9p(&(0x7f0000000340), 0x80800) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc02, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x94}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000440)=0x40) [ 238.104701][ T8591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.361716][ T8603] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 05:16:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000030000d01000000000000000000000000dc2852b1cadbf4a44acd858475ca74dbc04f05fce39c55b0cd786e3489777fbc7673d2b3903ebdf9b482068996"], 0x14}}, 0x20000800) [ 238.518484][ T8610] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.539511][ T7] tipc: TX() has been purged, node left! 05:16:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') syslog(0xa, &(0x7f0000000280)=""/219, 0xdb) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000200)) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x498) 05:16:49 executing program 1: socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2048095) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 238.985621][ T8623] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:16:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)={0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x400) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x76, &(0x7f0000000140)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r6, 0xff}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x2}, &(0x7f0000000300)=0x8) futimesat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{r8, r9/1000+10000}, {0x77359400}}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) 05:16:49 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$jfs(0x0, &(0x7f0000001280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB='\x00']) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x668f00, 0x0) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000180)=""/3, &(0x7f00000001c0)=0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x1404, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x20008054) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xd8, r5, 0x300, 0x70bd2b, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1a}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:system_r:kernel_t:s0\x00'}]}, 0xd8}}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) [ 239.295799][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x3}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) splice(r3, &(0x7f0000000040)=0x300000000000000, r4, &(0x7f0000000080)=0x100, 0x5272, 0xf) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) [ 239.373445][ T8644] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 239.589343][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 239.656372][ T8644] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 05:16:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1, &(0x7f00000016c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}, 0x80) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0xfd40}], 0x1}, 0x0) 05:16:50 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1132}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f00000002c0)=""/249, 0xf9}, &(0x7f0000000000), 0x20}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/l2cap\x00') ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000003c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000080), 0x12) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 05:16:50 executing program 3: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0xf, 0x0, {{0x1}}}, 0xfffffffffffffff5) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x24b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1c29e1ad, 0x5}, 0x0, 0x800, 0xffffffff, 0x6, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0x405c5503, &(0x7f0000000080)) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x4c4) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x7, &(0x7f00000001c0)=[{0x0, 0x90c, 0x3, 0x6}, {0x9, 0x800, 0x0, 0x8}, {0x81, 0x401, 0x1, 0x4}, {0x1000, 0x80, 0x28ec, 0x732}, {0x8, 0x0, 0x82f, 0x20}, {0x0, 0x2, 0x3, 0xffe0}, {0x9, 0x0, 0x0, 0x2}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0xc4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x80) 05:16:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x3, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 240.568936][ T8640] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.614053][ T8671] IPVS: ftp: loaded support on port[0] = 21 [ 240.633690][ T8653] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.659868][ T28] audit: type=1800 audit(1592457410.883:10): pid=8678 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15825 res=0 [ 240.691002][ T8678] MINIX-fs: mounting unchecked file system, running fsck is recommended 05:16:51 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x200101) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x10}, &(0x7f0000000380)=0x2ad1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x6}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, r3, 0x0, 0x3, &(0x7f00000000c0)='->\x00', r5}, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) [ 241.370516][ T8678] IPVS: ftp: loaded support on port[0] = 21 05:16:51 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x250ce47f) dup3(r2, r1, 0x0) [ 241.590117][ T8645] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.802062][ T8627] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:16:52 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000140)=0x4) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$EVIOCGREP(r7, 0x80044501, &(0x7f0000019140)=""/102348) write$P9_RAUTH(r7, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x8, 0x1, 0x7}}, 0x14) ioctl$EVIOCGREP(r4, 0x80044501, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000080)={0xfff9, 0x3, 0x9, 0x1000, 0x3, "b394b56e0600"}) socket$rds(0x15, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 05:16:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(r0, r2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 05:16:52 executing program 1: socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2048095) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 05:16:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf1d7, 0x7fffffff80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x40001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0xe70480d87aa0d5c9}, "3e35c61ab0c2cf4d", "51b97cdc4fbcc7b1a7767f14041f0afc", "86ddc172", "16cfb6dc2b04d9b8"}, 0x28) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x9, 0x0, 0x4, 0x10, 0xffff7fff, {0x77359400}, {0x2, 0xc, 0x0, 0x32, 0x0, 0x1, "dbd220fa"}, 0xff, 0x3, @fd, 0x7}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x28, r7, 0x301, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) 05:16:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000180)=[r6]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r2, r4, r6}, 0xc) 05:16:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$KVM_SMI(r0, 0xaeb7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800000, &(0x7f0000000100)={'trans=unix,', {[{@privport='privport'}, {@debug={'debug', 0x3d, 0x4}}, {@mmap='mmap'}, {@aname={'aname', 0x3d, '@))'}}, {@version_L='version=9p2000.L'}, {@mmap='mmap'}, {@loose='loose'}, {@posixacl='posixacl'}], [{@euid_gt={'euid>', r3}}]}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:16:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:16:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x222000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r0, 0x100, 0x0, 0x0, {0x8}}, 0x14}}, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clock_adjtime(0x4, &(0x7f00000011c0)={0x1, 0x5f1a, 0x1000, 0x80000001, 0x7, 0xffffffffffffffff, 0x800, 0xc6, 0x7, 0x6264ea9d, 0x0, 0x1, 0x95a6, 0xffffffffffff8000, 0x3ff, 0x3ff, 0x300000000, 0x6, 0x7, 0x71b75a14, 0x1ff, 0x100, 0x4, 0x2, 0x2, 0x6}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r3, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x47, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0xbf, 0x0) [ 243.871168][ T8739] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:16:56 executing program 3: mlockall(0x1) open(0x0, 0x0, 0xc0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xfec1, 0x220900) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x288480, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000180)={0x3, 0x1}) 05:16:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="f0651851beb51bad02776ca3eba5b70a32dd39d188a663ba894b860af9166618", 0x20}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630677fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 05:16:56 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="0400000cff4b00000000e0080000000000000000000024f30241c60b693aeae1c652621f3e4e35d4b01fbcb6781ef2cc90e274"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000e00e1ff0a0001006367726f757000002800020024000380080001000010000018000280140001000000020000000000f50b86"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:16:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0xffff, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x8, 0x6, 0xd0f, 0x20, 0x5, 0x0, 0x4}, 0xc) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:16:56 executing program 1: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)={0xcc, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1df}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x37}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000090) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000700)=0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x131, &(0x7f0000000300)="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"}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000740)=0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) 05:16:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x222000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r0, 0x100, 0x0, 0x0, {0x8}}, 0x14}}, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clock_adjtime(0x4, &(0x7f00000011c0)={0x1, 0x5f1a, 0x1000, 0x80000001, 0x7, 0xffffffffffffffff, 0x800, 0xc6, 0x7, 0x6264ea9d, 0x0, 0x1, 0x95a6, 0xffffffffffff8000, 0x3ff, 0x3ff, 0x300000000, 0x6, 0x7, 0x71b75a14, 0x1ff, 0x100, 0x4, 0x2, 0x2, 0x6}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r3, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x47, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0xbf, 0x0) [ 246.082639][ T7214] minix_free_inode: bit 1 already cleared [ 246.096742][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.203714][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 05:16:56 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r9, 0x0, 0x8000, 0x2) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000a80)=0x0) kcmp(r11, 0x0, 0x2, r9, r8) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB="7f2626e991039ac75e7a2053aecd7befa7b8f25afa0b208d6447cdfa3be748a27546638533cfe5e489af81690d90890a0c4dd9f64f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653edd00022aafc5d4aaa3be22d6a59e2b078d1eda69c077d7cdef60000c941de38d2c2f2602ed7eb8b9c3b0cb26278001e0ae733afda64f2a53fb8753d5f07a33068d95e9bdca24b5e393f008ad4f052a2085085744186e34d5150b5b519a2e9d7663219eef5e5cf64f66493fba5e579a07e0cc2ac3cb33a2d62bd47220726c64708c020b38a796cecfcba7708824ccaa0d5588557aa189924f51cd5d0d5eded3f3bdb46eb83236ce2f1013960b1535b2eb270bc21efe86d168deb3dfe0efef4f711cc767e5bdfe7562b5ae835f214ea8824688a134d2315b8552329d9ac2467726849e0d35562f01599efc5a2b3f34372fac0ee98d8f4bbddbb3f7be3ff6a55432acc99a9ad7e0ebcdb76006f9375879ac3948e20b6fe0d61b0b3cb20b62775f2657a56af27eba48ab36cb386e81885", @ANYRESHEX, @ANYRES32, @ANYRESOCT=r8, @ANYBLOB=',', @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b04f977ee65f01000000f061bf91999b942e04792d53cc636019e31925132a5ccab623b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153"]) statx(r2, &(0x7f0000000600)='./bus\x00', 0x800, 0x10, &(0x7f0000000400)) 05:16:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) pidfd_getfd(r2, r4, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x110) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00000080000000", @ANYRESHEX=r2, @ANYBLOB=',fscache,cachetag=@--^\',k']) [ 246.635154][ T8799] fuse: Unknown parameter '&&é‘šÇ^z S®Í{笠òZú dGÍú;çH¢uFc…3Ïå䉯i ‰ [ 246.635154][ T8799] MÙöOŸI9TÉ“eÄŒŠÉe—Ö±^‚%»K†ÖöÄñÕ3 :ÙtÈVSíÐ' [ 246.674125][ T8811] 9pnet: Insufficient options for proto=fd [ 246.858264][ T8799] fuse: Unknown parameter '&&é‘šÇ^z S®Í{笠òZú dGÍú;çH¢uFc…3Ïå䉯i ‰ [ 246.858264][ T8799] MÙöOŸI9TÉ“eÄŒŠÉe—Ö±^‚%»K†ÖöÄñÕ3 :ÙtÈVSíÐ' 05:16:57 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r9, 0x0, 0x8000, 0x2) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000a80)=0x0) kcmp(r11, 0x0, 0x2, r9, r8) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB="7f2626e991039ac75e7a2053aecd7befa7b8f25afa0b208d6447cdfa3be748a27546638533cfe5e489af81690d90890a0c4dd9f64f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653edd00022aafc5d4aaa3be22d6a59e2b078d1eda69c077d7cdef60000c941de38d2c2f2602ed7eb8b9c3b0cb26278001e0ae733afda64f2a53fb8753d5f07a33068d95e9bdca24b5e393f008ad4f052a2085085744186e34d5150b5b519a2e9d7663219eef5e5cf64f66493fba5e579a07e0cc2ac3cb33a2d62bd47220726c64708c020b38a796cecfcba7708824ccaa0d5588557aa189924f51cd5d0d5eded3f3bdb46eb83236ce2f1013960b1535b2eb270bc21efe86d168deb3dfe0efef4f711cc767e5bdfe7562b5ae835f214ea8824688a134d2315b8552329d9ac2467726849e0d35562f01599efc5a2b3f34372fac0ee98d8f4bbddbb3f7be3ff6a55432acc99a9ad7e0ebcdb76006f9375879ac3948e20b6fe0d61b0b3cb20b62775f2657a56af27eba48ab36cb386e81885", @ANYRESHEX, @ANYRES32, @ANYRESOCT=r8, @ANYBLOB=',', @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b04f977ee65f01000000f061bf91999b942e04792d53cc636019e31925132a5ccab623b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153"]) statx(r2, &(0x7f0000000600)='./bus\x00', 0x800, 0x10, &(0x7f0000000400)) [ 246.962297][ T8811] 9pnet: Insufficient options for proto=fd 05:16:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xd8, 0x1, 0x1, 0xd44869f7ff16f44a, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_ID={0x22}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x101, 0x3f8a, 0x9, 0x800]}, @CTA_NAT_SRC={0x8c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xd8}}, 0x80) sendmsg$kcm(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 247.389417][ T8833] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 247.471167][ T8834] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.530203][ T8842] fuse: Unknown parameter '&&é‘šÇ^z S®Í{笠òZú dGÍú;çH¢uFc…3Ïå䉯i ‰ [ 247.530203][ T8842] MÙöOŸI9TÉ“eÄŒŠÉe—Ö±^‚%»K†ÖöÄñÕ3 :ÙtÈVSíÐ' [ 247.547005][ T8847] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 247.715300][ T8833] device  entered promiscuous mode [ 247.822132][ T8830] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 247.907217][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.113763][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.179974][ T8833] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 248.190524][ T8834] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 248.241464][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.335280][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.675301][ T8847] device  left promiscuous mode [ 248.914546][ T8833] device  entered promiscuous mode 05:16:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000100)=""/202) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000280)={0xc, 0x3, "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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x1800, &(0x7f0000000200)=[r3, r1, r4, r5, r0, r1, r0, r6]}, 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050025001201", 0x2e}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) write$char_usb(r7, &(0x7f00000003c0)="1bbcde44fada56980a5f253d7fa5870699bc80c75d39624b1c6f306c616086242a679195dac9a73fc1fcdd9fc6e136ff0294c37a077e1b7f6f872caa06e068cf73319f5c78c10d08ed90c0ec94e1bc809044c0736cd9713f7916b070260c3cf8ba4c2390f883a211aa3d7831ee90851367cdaf5c176f9467a30f4cf231b13dfbcbda57d4d24d102c035f6a6356177305d76c13f0c6b50d84e687896a3978fccd5507bb7e3ef84fdf32341ca58f6945d137ab7f847eb88a1c64913c66ca77d669fd4d3882ad90609016194d5bd26330992278bcc8feb0e7b67d7a675b21", 0xdd) [ 248.946878][ T8834] device  left promiscuous mode [ 249.134201][ T8946] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 249.155829][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.215077][ T8946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.231587][ T8946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.241888][ T8946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:16:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xd8, 0x1, 0x1, 0xd44869f7ff16f44a, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_ID={0x22}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x101, 0x3f8a, 0x9, 0x800]}, @CTA_NAT_SRC={0x8c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xd8}}, 0x80) sendmsg$kcm(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 05:16:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c00020008002d0002"], 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) [ 249.587294][ T9003] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 249.707913][ T9003] device  entered promiscuous mode [ 249.737230][ T9010] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 249.748933][ T9006] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:00 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x222000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r0, 0x100, 0x0, 0x0, {0x8}}, 0x14}}, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clock_adjtime(0x4, &(0x7f00000011c0)={0x1, 0x5f1a, 0x1000, 0x80000001, 0x7, 0xffffffffffffffff, 0x800, 0xc6, 0x7, 0x6264ea9d, 0x0, 0x1, 0x95a6, 0xffffffffffff8000, 0x3ff, 0x3ff, 0x300000000, 0x6, 0x7, 0x71b75a14, 0x1ff, 0x100, 0x4, 0x2, 0x2, 0x6}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r3, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x47, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0xbf, 0x0) 05:17:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x7, 0x0, 0x0, 0xcf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x4, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/49) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x81, 0x6, {r3}, {}, 0x2, 0x9}) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0x2b32, 0x1}, &(0x7f00000002c0)) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x76, &(0x7f0000000140)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r7, 0x4) 05:17:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="f310d4257696a020ed9b45b65a80c7fd35343c0ed3146ffcc29b1e239a9db6a5", 0x20}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11e000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.918963][ T9001] device batadv0 entered promiscuous mode [ 250.504233][ T9010] device  left promiscuous mode 05:17:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3ff, 0x12) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000040)={0x0, 0x7dffffff, 0x7, &(0x7f0000000000)=0x100000000002}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaae0180c200000008004500001c000000000001099078ac1e0001ffffffff120090785cc00000"], 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) 05:17:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc60100002400c000200050c65561146ca567a780c9cc9a5e93582c1", 0x2e}], 0x1}, 0x200048c0) 05:17:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000100)=""/202) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000280)={0xc, 0x3, "7e82fd0f77d5d993a562c238f541ad2c280beb4cc0db19eabe664dc4d4a1e5e711c00b145b6bac121fff5119692abbf5b31c67ba03f4b2708739a6f08afce507eca00a21f015807645d0a6f8ce8885d66d4d6c550b7a1db7bc7d02c670981783832dc380cbb6424ca0bdece629be4cf6384d7aeb9c4d03e2385b7f70109fe76573c16bd858a56846f1e6b288dca8d8797dfff67853b1aa7802eec59119770987a228d72c2c286221181515566fcffbbe0673fadc72741e90da78756824354a96a040d7a00477d3a3dd3ad4b194cc1315dedec2a859df0463d84eaaed67641be3335a7fc45377cfac1ca06be3c0f1faf7ec8d5330cc3c38785a31308eff9ae905"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x1800, &(0x7f0000000200)=[r3, r1, r4, r5, r0, r1, r0, r6]}, 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050025001201", 0x2e}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) write$char_usb(r7, &(0x7f00000003c0)="1bbcde44fada56980a5f253d7fa5870699bc80c75d39624b1c6f306c616086242a679195dac9a73fc1fcdd9fc6e136ff0294c37a077e1b7f6f872caa06e068cf73319f5c78c10d08ed90c0ec94e1bc809044c0736cd9713f7916b070260c3cf8ba4c2390f883a211aa3d7831ee90851367cdaf5c176f9467a30f4cf231b13dfbcbda57d4d24d102c035f6a6356177305d76c13f0c6b50d84e687896a3978fccd5507bb7e3ef84fdf32341ca58f6945d137ab7f847eb88a1c64913c66ca77d669fd4d3882ad90609016194d5bd26330992278bcc8feb0e7b67d7a675b21", 0xdd) 05:17:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x3, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x6b) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 05:17:01 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000000000000000000000000200000003000000d80100009800000000000000980000009800d95e162d5f9560a60000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) r1 = memfd_create(&(0x7f0000000080)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xb8000004, 0x0}, 0x0, 0x8, &(0x7f0000000340)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') prctl$PR_SET_DUMPABLE(0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000380)={0x3ac2, 0x1, 0x4, 0x5, 0x0, [0x0, 0xfffffffd, 0x5848, 0x4], [0x2, 0x80000001, 0x8, 0x3], [0x101, 0x4, 0x7, 0x5], [0x3, 0x3, 0x51088733, 0xffffffffffffffff]}) [ 251.043300][ T9044] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 251.122114][ T9048] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 251.176269][ T9044] device  entered promiscuous mode [ 251.220680][ T9048] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000002c0)="511ade1b143ce25c31104ae9dfc071eadf4eb3db04972ac1de64b1661888e2370daada2296d38ab1d067df910f4d6e56cdc2e17c293830fc6fe1979419bfa826bcd255824ea3e1f0b377da1433c7ed176260b1aefec0e4774018029b05b460bfadc1938884a783b7204d2f104296942a5eb36abd85aa99267585fddf7513a577b5dffffcdeee2b78eb2d", 0x8a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x2, @raw_data="ed7563edb435a210bcb4b08279fe61bb4f62594b6dfbda2505208569fc1cae173becf4b0afc6c8fd83b0efa1f033fdf41a7b87ffa0f6348524cd4ba88c8453ac2fcb383f44a46101e06acc8448034f0475aa25f349992c501fd24c4d9d5ec35433808f5924b193293e3a89217058beec977df27975fba5172e23b69f80a8ab34ecf832833e60806f89e5cd5cad0f1fbfe61188dfd4459127d5ffb0c3e6dd0e410c52e304d813e7f662d211986bcd1b7f3e21699cc9a1131716dce46c2dfff9fc0e8908db14cea8be"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) fanotify_mark(r2, 0xc0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)={0xffffffffffffffff, 0xffff2d86, 0x1}) [ 251.361507][ T9060] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:01 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x4, 0x0, 0x5, "3a60c5b3ba78618a6109408747f39975ebc1c005b0358d29f64d1c7b781a2d8b1bc14f26cf6cf809b6a2025546a67d8d6724d4a42e44ada57da0b637cd2bd8", 0x9}, 0x60) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x8d, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x6, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fdecdb0b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0xe6, 0x80}, {0x6, 0x24, 0x1a, 0x8, 0x11}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x16, 0x24, 0x13, 0x3, "3c69faa87933114d43a57c0aa52ac3a37758"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x24}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x2, 0x81}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x1f, 0x56, 0xff, 0xff, 0x20}, 0x27, &(0x7f00000002c0)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x0, 0x3, 0xff, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "238f420532967edb403fff00ce88cbac"}, @ptm_cap={0x3}]}, 0x1, [{0x8a, &(0x7f0000000340)=@string={0x8a, 0x3, "26e99aa41bef99e6aa705d75e4964c76038c7cdda1ed4fd039391d2ac41c50b3bb743968be283b95d4d589180151ad5ea9bd7662109a5f9267f86900ca61ba322da1a79d7780f63ea97deb6e2e409634ca2ee6431d2790f87f13281c7f0de35c57c433cf2255e1a35713bc6a1eb302deafb699f60508c4e11734856856aaf9b7eccbb65bf325d68b"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x2, 0x98, {0x98, 0x5, "f147e323e3d094e83b2d524f5f15b7563b65c60733c15f9721b040950a5d0ac6f6d842ee42f449799738d74eace31d74f0ac32b1276f0987501fded6acd2308829b987a554c5811d768814e3fd8777c7974c64c114ff6e16d783c0ecfa01d4cbd035bfa6e9cd4b06183051490e38a9828dd96b9df9e6ea9958ff6a0186b5aedd8e3274cf2a65079b4da4191fe05b7d0d8e87952b90cd"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x80, "a4c1f4a1dddd1b68157f7e0b1c224c5af7e3e03ddbdab6cee6a628b188107b2c2d713f81c3979a3314a785b154a25a878bde64d1f2d5f7505d06cf58a579b0d94d7362e015f65acc96657745b1d7f6867831fc322bc34c5a6240861ca938accbdacf8cf591f0ac4edcd0c5045eaf4a0d468b5ed4a14c3dbefaf34da2bc634b40"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x48, 0xfff, 0x9, 0x8001, 0x81, 0x1, 0x1, 0x3f, 0x6000, 0x1}}, &(0x7f0000000700)={0x20, 0x85, 0x4}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000007c0)={0x20, 0x89, 0x2}}) 05:17:01 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) madvise(&(0x7f00001a3000/0x4000)=nil, 0x4000, 0x15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x434f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) 05:17:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300096f68c7701802800010059f6ffffaaaaaaaaaa0000000000000000001800120000000080af7d9d5a31666d526ec879392600"/69], 0x58}}, 0x0) [ 251.623649][ T28] audit: type=1800 audit(1592457421.846:11): pid=9047 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15732 res=0 [ 251.658712][ T9072] binder: 9061:9072 ioctl 4018620d 0 returned -22 [ 251.690207][ T9072] binder: 9061:9072 unknown command 4 [ 251.709795][ T9072] binder: 9061:9072 ioctl c0306201 200000c0 returned -22 [ 251.861604][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.887846][ T3835] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 252.127458][ T3835] usb 5-1: Invalid ep0 maxpacket: 16 [ 252.297184][ T3835] usb 5-1: new low-speed USB device number 3 using dummy_hcd 05:17:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x9c08, 0x7f20, 0x7f, 0x9, 0x17, "ba7412790aef0f70"}) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$TCFLSH(r0, 0x540b, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x100, &(0x7f0000000100)=ANY=[@ANYBLOB="61707004d9eaefd44e87efd77b72616973655b7479706542566d617369672c00039dd8ae605a79face86b238077ee9aa150cf7627f3db5d55a4f977b8190a10698"]) 05:17:02 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x222000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r0, 0x100, 0x0, 0x0, {0x8}}, 0x14}}, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clock_adjtime(0x4, &(0x7f00000011c0)={0x1, 0x5f1a, 0x1000, 0x80000001, 0x7, 0xffffffffffffffff, 0x800, 0xc6, 0x7, 0x6264ea9d, 0x0, 0x1, 0x95a6, 0xffffffffffff8000, 0x3ff, 0x3ff, 0x300000000, 0x6, 0x7, 0x71b75a14, 0x1ff, 0x100, 0x4, 0x2, 0x2, 0x6}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r3, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x47, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0xbf, 0x0) 05:17:02 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) madvise(&(0x7f00001a3000/0x4000)=nil, 0x4000, 0x15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x434f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) 05:17:02 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x24, r5, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x620, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$PPPIOCATTCHAN(r1, 0x8004745a, 0x0) 05:17:02 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x262500, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2c0a00, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'batadv_slave_0\x00', {0x3}, 0xfffe}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x9, 0x6, 0xe0}) fsync(r0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x8) fchmod(r4, 0x100) [ 252.496458][ T9088] IPVS: ftp: loaded support on port[0] = 21 [ 252.547165][ T3835] usb 5-1: Invalid ep0 maxpacket: 16 [ 252.552736][ T3835] usb usb5-port1: attempt power cycle 05:17:02 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000500)="8d", 0x1}, {0x0}], 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40042, 0x184) syz_genetlink_get_family_id$nl80211(0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)=[&(0x7f0000000040)='-{)\x00', &(0x7f00000002c0)='-\x00', &(0x7f0000000340)='\'.{]{\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='*+\x00'], &(0x7f00000007c0)=[&(0x7f0000000480)=':&:~\x00', &(0x7f00000004c0)='%*\x9f]\x97\x00', &(0x7f0000000540)='-$\x00', &(0x7f0000000580)='$}-#\x00', &(0x7f00000005c0)='!%\x00', &(0x7f0000000600)='&\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='$\'\x00', &(0x7f00000006c0)='\'}&\x00', &(0x7f0000000780)='--#\xad-\x00']) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) pipe(0x0) close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x4, 0x3d, 0x43, 0x44, 0x0, 0x0, 0x48060, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc05}, r2, 0x2, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840)='/dev/uinput\x00', 0x802, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) connect$inet(r3, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x80006) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) [ 252.681317][ T9100] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 253.131405][ T9095] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 05:17:03 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140100002200810a"], 0x14}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r1 = socket(0x25, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x3, 0x400) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r9, 0x80047453, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x3f, &(0x7f0000000100)=[r4, r5, r6, r7, r8, r1, r1, r2, r9]}, 0x9) splice(r6, 0x0, r1, 0x0, 0x8000000000000629, 0x9) [ 253.317057][ T3835] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 253.408965][ T3835] usb 5-1: Invalid ep0 maxpacket: 16 05:17:03 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) madvise(&(0x7f00001a3000/0x4000)=nil, 0x4000, 0x15) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x434f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) 05:17:03 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x20}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x400, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x2, 0x3, 0x4, 0x7, '\x00', 0x5}, 0x3, 0x100, 0x5, r4, 0x2, 0x7ff, 'syz0\x00', &(0x7f0000000080)=['\x00', ']&\x00'], 0x4, [], [0x3f, 0x3f, 0xd3, 0x3]}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x2c}, 0x1, 0xffffffff00000000}, 0x0) [ 253.557344][ T3835] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 253.587585][ T9088] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.667268][ T3835] usb 5-1: Invalid ep0 maxpacket: 16 [ 253.674725][ T3835] usb usb5-port1: unable to enumerate USB device [ 253.722261][ T9088] IPVS: ftp: loaded support on port[0] = 21 [ 253.907750][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.287078][ T21] tipc: TX() has been purged, node left! 05:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000001600)=0x97d4, &(0x7f0000001640)=0x2) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r5, &(0x7f00000015c0)={&(0x7f0000000040)=@ipx={0x4, 0x7f, 0x1, "178314096fa8", 0x8}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)="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", 0x1000}, {0xfffffffffffffffe}, {&(0x7f00000000c0)="ee9b047e62faade8b9bc82007a62babd02d464164358dbd62cc738d4497c0e9f3793f56cf9af9ef3510fae733a38e28dffba30362eed1536b1694b7e3c6211a74dca146fc251e65af6d1f53b6a954f27e2f07db117076cecbc940d6f4bf069bea05abaa35b6196967b1b3372b50b4d6f23937be7e406e1c72592f11750a90e35f2826ed2721924670c1975fac929f79282fb378393d011ddeafd64728326c2d31cc41f896a3eb12dabc699a58ba8386f71946610c131c64178f9c207b45af3b9c93ee6d91a65766bb4e44ced64", 0xcd}, {&(0x7f0000001280)="56c21ada1aa2c681c6ba22e6c58539e8b8cd279c3d47f1c27af1b6d8ee1aa8f84532bf214551d6b67c9ed7b171812f16d06145dc415b8034b49745e61cf1ba15e5e5fbc07bec79295eba4a1946b21cb14682e08bd826b62e07dabc8e907a55a230df3c8e99f80846d9ed141c4f4fb13e1ecd231807f5aa5eaf0c6309087242d8d0c4d3874ef378fa29eb2e9b6cce008d35290e130ccf", 0x96}, {&(0x7f0000001340)="988eb4433628b9b58044959aa4662e07455c4331b26438f702013c33866126936443688acd7f09ccd6f9a3c47267a996a9789305dbed65061053a4a9967e4eb81be94c258390db0273311ec80f5345559987b0620d05fedda8ccc565212ece3d28f8752f2de9d1b6ceabc4c3d75694fe8a69beda44b094c468a033a7d720c3dcd57fd2bc0c12aaeb2f9d530ae78a31b52b5a0c59f40e34dc304f", 0x9a}, {&(0x7f0000001400)="ae8c14837b112d0e5216518b53e7d272fee25ba8a83f51551d5e2540d6a7f0a57eb07b527d9131b72328e3b09d29d2c87cab6e6bdcd1068724ad3a95090bd7b794d88403dd54390ea7f3d08e3963ac4a113833d4047df9793f3173d4433581fbdc32b7abeca8fe278c03619a40526ce8a58df7d36dd73152d65f4caaed3e453998b83db6b9967c13", 0x88}, {&(0x7f00000014c0)="2838302a49bd128fdfe280ca9c74ccd4e045bcf4aacd5d7a8be4e3295403d05583c16aab16823be2c68a343c8f413135bc178c805ea6ce60890b3dbbaf7d29925990b1cb47e854602f3f491e3d63db5325a11edee83f63ae748433e8d1d6338ffbeb3304b9b40bc0414702f87edf2e6e0ab80891bb1536f74fd1e6b592647fc9434010cd82c92685d78b306c20c71c5437646d4d48ddb2c7a8950d66d6ec7320401af049b627456a9d3843166aa0dbf60a4dda70c48af69c2443caebae806ae0fab74e5cae6d10765cb54fd669247855156b7abf2c7fc6d079ba216fb48e25166f94be22fb243aec01c5325b1bd9d385412518", 0xf3}], 0x7}, 0x10) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:17:04 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0xffffffffffffff77, 0x8) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="8800000080d200000000000ad735a77604a897d81664ea03542c4b0bbf80c766be03de664c8e00000002000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005a6fe2fae43f98b281b98f3ef78a565072d01ee60a32d059caa6397eb407b45b2e84838ac8dbdfda933370f40175b2f1439e06c3130b7fa5e3dcc84f10b327683f6789d00276423ce99b557cc7cefd37c3825a983619d15d15b61a07fe81358f4571c878aa2ef06fe051efba82935"], 0x88}}, 0x0) r5 = getpid() r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x14, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4b51}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40100}, 0x40000) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000480)) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x11c, 0xc, 0x3, 0x801, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x6}, [@nested={0x95, 0x23, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @generic="eb125ae287396e84a1457c86bb918ecb225006c57af9810a9b48b0d169666d1850f7ba7e9270d4f1a6e126730e0193fda5afcfb0ed8ae398c92ea39934667b9f80b3e6f5c7e58761495bac59bc43813c27a27f40aabd717e4e12eae33fbcbc7b1c3d5479305313c26f5162673a497ef6f9", @typed={0x8, 0x44, 0x0, 0x0, @pid=r5}]}, @generic="c708ba25139383549554e7f362e7eb94a9683dc18e0815701a6c5801764c418e50a82e69da3255696b8b7e039caa8675a9e08bda6f48da19f599bebf8790a24329ebac1fcf62b3c956ccd4cda258f78d6f8135a5c81d289ecb7c4a9bcca8870cbe520db24acfeddcd4010dbf14829d"]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24048090) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000180)={0x7, "25b002b6f483bef433a32bc91856e770308e545e2ff315c69385d15121a48e78"}) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2f, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x40000, 0xffffffff000}]) write$P9_RLOPEN(r0, &(0x7f00000004c0)={0x18, 0xd, 0x2, {{0x40, 0x0, 0x6}, 0x400}}, 0x18) 05:17:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xff000000, 0x65}, [@ldst={0x7, 0x1, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 05:17:04 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf32(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xfc, 0x1f, 0xff, 0x8, 0x3, 0x6, 0x7ff, 0x1c6, 0x38, 0x160, 0x0, 0x2, 0x20, 0x2, 0x8, 0x400, 0xfe00}, [{0x2, 0x6, 0x0, 0xa1, 0x0, 0x80000001, 0xffff, 0x8}], "5b9365d9dbc078b5b0b7e172d0bbba19fcfd7a355e5c2be59534c45d240dacbc513ff5783d59b046740c8c921a96bd9fb49a1030b35867cec91611605db0181c7277358686a7b2b8e3", [[], [], [], [], [], [], []]}, 0x7a1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0x209) 05:17:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xb, &(0x7f0000000040)=@raw=[@generic={0x6b, 0x7, 0x5, 0x8, 0x2}, @alu={0x4, 0x0, 0xb, 0x9, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x44}, @map_val={0x18, 0xf, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1fdd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x100}, @alu={0x7, 0x1, 0x2, 0x2, 0x3, 0xfffffffffffffffe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x1, 0xa, 0x4, 0x1, 0x8, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:17:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000280)=[{&(0x7f0000000140)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1dcb25cf439ce09c028ebac7bb6fb421d7cfc80a8049f1685ed528e8c6ef87d863b6a14b34923f6b753fce66600e42b74b06cfd16483cf67f388dd8d6d237109263aad1b33f20044336de9e94a5c961d8575ab9c5686a76dc7154d1c52addf6116102b4f1347f654495ae769ad28925fb20000"]) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000f5dbdf250300000008000200020000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}}, 0x24000000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) eventfd2(0x5, 0x0) [ 254.614850][ T9186] FAT-fs (loop1): Unrecognized mount option "Ë%ÏCœàœŽºÇ»o´!×ÏÈ [ 254.614850][ T9186] €Iñh^Õ(èÆï‡Øc¶¡K4’?ku?Îf`B·KÏÑdƒÏgóˆÝm#q &:­3ò" or missing value 05:17:05 executing program 5: unshare(0x400) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x2, 0x2, 0x7d, 0x0, 0x0, 0x0, 0x0, [], 0x0, r1}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7f, 0xff, 0x7, 0xed6e}) [ 254.740095][ T9186] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.853774][ T9186] FAT-fs (loop1): Unrecognized mount option "Ë%ÏCœàœŽºÇ»o´!×ÏÈ [ 254.853774][ T9186] €Iñh^Õ(èÆï‡Øc¶¡K4’?ku?Îf`B·KÏÑdƒÏgóˆÝm#q &:­3ò" or missing value [ 254.918803][ T9206] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:05 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000128008000100677470001c003124adb6c681c354030280080001", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="985b7025dbbd92a498ce75516bcb896b67501e4308249d2cb7ca9ed4d9e9ac937e07074aae65f46261bf324a8eb198f9575463c0fc5ac701e5bf24cebb9364a2e4b88b71a58b035f7ce3c114310c9947fb717e737be5f7c2348b1cc94aeb994d56d30a6da2935afdaed1a69eafe725c9573546dee902caf226922d9e9026b0fdd2ec6662f43bc759df0a647dd207ed63d03f"], 0x50}}, 0x0) r4 = gettid() tkill(r4, 0x3c) open(0x0, 0x141042, 0x0) 05:17:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'batadv_slave_0\x00', {0x6}, 0x6}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:17:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000061110400000000008518232869a4e80e26b710000002000000850000000f00000095000012000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xe, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) 05:17:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getpid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x9, 0x8, 0x10000}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='ns\x00') r3 = getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ptrace$getsig(0x4202, r3, 0x7ff, &(0x7f0000000240)) ftruncate(r2, 0x200004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x1}, 0x20, 0x8, 0x1, 0x80, 0x28, 'syz1\x00', "2e2932525c0905490aee74def391ea7e9873f4d71266e34b6a02dc4dd45bb398", "a289c389feeb1c3af1048562da6d013e35cbb1e6d673f2c4655ff7e28b51ea70", [{0xfff8, 0x8, {0x0, 0xe5e}}, {0x6, 0x8, {0x2}}, {0x0, 0x15, {0x0, 0xc0000000}}, {0xfffa, 0x94d, {0x2, 0xffff}}, {0x400, 0x0, {0x3, 0x7}}, {0x80, 0x2, {0x0, 0x1c}}, {0xfffd, 0x6, {0x2, 0x6}}, {0x182, 0x1, {0x0, 0xffff}}, {0x5, 0x100, {0x3, 0x8}}, {0x3, 0x8, {0x8e6910ab6a27d9bc, 0xe8}}, {0x46e, 0x8, {0x3, 0x3f}}, {0x0, 0xc180, {0x3, 0x1}}, {0x0, 0x7fff, {0x3, 0x4}}, {0xd1b, 0x5, {0x3, 0x30000}}, {0x4, 0x1, {0x0, 0x2}}, {0x9, 0xb000, {0x0, 0x3}}, {0xffff, 0x9, {0x1, 0x8}}, {0x4, 0x9, {0xea8b9a04e2a833ef}}, {0xd4, 0x401, {0x0, 0x7f}}, {0x0, 0x2, {0x3, 0x8000}}, {0x0, 0xfff8, {0x3}}, {0x2, 0x7c6d, {0x2, 0x4}}, {0xfff, 0x140, {0x3, 0xffffffff}}, {0x20, 0x20, {0x2, 0x1}}, {0x2, 0x4, {0x2, 0x40}}, {0x5, 0xb6c, {0x4, 0xffffffff}}, {0x5, 0x924, {0x3, 0x800}}, {0x0, 0x8, {0x1, 0xfff}}, {0x5, 0x7f, {0x0, 0xffffffd2}}, {0x1ff, 0x9, {0x1, 0x2}}, {0xffff, 0x200, {0x1, 0xf0}}, {0x101, 0x1000, {0x2, 0x3db4}}, {0xed, 0xc64, {0x3}}, {0x1f, 0x1, {0x3, 0x7f}}, {0x2, 0x1f, {0x1, 0x7fff}}, {0x9, 0xffd, {0x3, 0x7ff}}, {0xdf0, 0x6, {0x3, 0x40}}, {0x7fff, 0x9, {0x3, 0x10001}}, {0x401, 0x7e3, {0x0, 0x9}}, {0x73, 0x8000, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xd156}, 0x5, 0x81, 0x3ff, 0x9, 0x9, 'syz1\x00', "0c61a4e163a811cf41508efda71de579314b5af4771fd8e4af5d0b764a7a57ff", "3bd8a8b2280d7822954d93acb49d3a4e9caf66f360fa338c104eeb8f193432ba", [{0x1, 0x6, {0x3, 0x7}}, {0x1ff, 0x3f, {0x1, 0x6a017d92}}, {0x70c, 0xf77c, {0x3, 0x8001}}, {0x4, 0x7, {0x2, 0x1}}, {0x5, 0x8, {0x3, 0x1}}, {0x1, 0x3, {0x0, 0x8}}, {0x85, 0x0, {0x1, 0x401}}, {0x7, 0x7ff, {0x0, 0x2d}}, {0x8000, 0x1, {0x3, 0x7f}}, {0x6, 0x4, {0x1, 0x7}}, {0x9, 0x1ff, {0x1, 0x9}}, {0x7f, 0x156, {0x1, 0x4f}}, {0x4, 0x0, {0x1, 0xffffff01}}, {0x1000, 0x7, {0x0, 0x7fff}}, {0x4, 0xfa, {0x3}}, {0x0, 0x400, {0x1, 0xfffff800}}, {0x40, 0x200, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0x9}}, {0x1ff, 0xffff, {0x2, 0x80000001}}, {0x8, 0x6, {0x1, 0xffffffff}}, {0xaf35, 0x3, {0x0, 0x6}}, {0x4472, 0x5d7, {0x0, 0x5}}, {0x7, 0x7fff, {0x2, 0x8001}}, {0x81, 0xe57, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x80000001}}, {0x5, 0x6, {0x1, 0x1}}, {0x2fc9, 0x1a, {0x2, 0x3f}}, {0x0, 0x8, {0x3, 0x1dd}}, {0x0, 0x336, {0x1, 0x6}}, {0x1f, 0x8, {0x0, 0x5}}, {0xd5, 0x2, {0x2, 0x100}}, {0xa928, 0xffff, {0x3, 0xfffffffa}}, {0x1ff, 0x9, {0x1, 0x40}}, {0x1, 0x7058, {0x3, 0x4}}, {0xffff, 0xfff, {0x0, 0x80000000}}, {0x81, 0x6, {0x0, 0x401}}, {0x6, 0x8, {0x1, 0x1000000}}, {0x6d, 0x8}, {0xcdd, 0x200, {0x3, 0x401}}, {0x6, 0xe9, {0x0, 0x401}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 05:17:05 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000280)={0x9887, 0x40, 0x10000, 0x9}, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[], 0x4c4) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x5, 0x0, 0x9, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000002c0)={0x2, 0x6, 0x4, 0x0, 0x5, "c34a3fdae0fa065ee075f3d25d7f1e84a7d63c"}) sendfile(r3, r3, &(0x7f0000000480), 0xa198) [ 255.368844][ T28] audit: type=1804 audit(1592457425.597:12): pid=9192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir005195670/syzkaller.IjfYLY/31/file0" dev="sda1" ino=15869 res=1 05:17:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e0000040002800a0005000400000000000000"], 0x40}}, 0x0) [ 255.534789][ T28] audit: type=1804 audit(1592457425.637:13): pid=9220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir005195670/syzkaller.IjfYLY/31/file0" dev="sda1" ino=15869 res=1 05:17:05 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x220200, 0x198) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9, 0x20000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db505") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ptrace$cont(0x1f, 0x0, 0x8000000010100, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x1) ftruncate(r3, 0x80006) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 255.626114][ T9222] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 05:17:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x64040, 0x0) [ 255.764646][ T28] audit: type=1800 audit(1592457425.987:14): pid=9233 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15849 res=0 [ 255.869368][ T9235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.920715][ T9234] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 255.964411][ T9229] validate_nla: 2 callbacks suppressed [ 255.964421][ T9229] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 256.185976][ T28] audit: type=1800 audit(1592457426.407:15): pid=9242 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15838 res=0 05:17:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x9a, 0x9, 0xf7, 0x92, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa2}, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600000f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socketpair(0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) [ 256.246845][ T7322] minix_free_inode: bit 1 already cleared 05:17:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getpid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x9, 0x8, 0x10000}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='ns\x00') r3 = getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ptrace$getsig(0x4202, r3, 0x7ff, &(0x7f0000000240)) ftruncate(r2, 0x200004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x1}, 0x20, 0x8, 0x1, 0x80, 0x28, 'syz1\x00', "2e2932525c0905490aee74def391ea7e9873f4d71266e34b6a02dc4dd45bb398", "a289c389feeb1c3af1048562da6d013e35cbb1e6d673f2c4655ff7e28b51ea70", [{0xfff8, 0x8, {0x0, 0xe5e}}, {0x6, 0x8, {0x2}}, {0x0, 0x15, {0x0, 0xc0000000}}, {0xfffa, 0x94d, {0x2, 0xffff}}, {0x400, 0x0, {0x3, 0x7}}, {0x80, 0x2, {0x0, 0x1c}}, {0xfffd, 0x6, {0x2, 0x6}}, {0x182, 0x1, {0x0, 0xffff}}, {0x5, 0x100, {0x3, 0x8}}, {0x3, 0x8, {0x8e6910ab6a27d9bc, 0xe8}}, {0x46e, 0x8, {0x3, 0x3f}}, {0x0, 0xc180, {0x3, 0x1}}, {0x0, 0x7fff, {0x3, 0x4}}, {0xd1b, 0x5, {0x3, 0x30000}}, {0x4, 0x1, {0x0, 0x2}}, {0x9, 0xb000, {0x0, 0x3}}, {0xffff, 0x9, {0x1, 0x8}}, {0x4, 0x9, {0xea8b9a04e2a833ef}}, {0xd4, 0x401, {0x0, 0x7f}}, {0x0, 0x2, {0x3, 0x8000}}, {0x0, 0xfff8, {0x3}}, {0x2, 0x7c6d, {0x2, 0x4}}, {0xfff, 0x140, {0x3, 0xffffffff}}, {0x20, 0x20, {0x2, 0x1}}, {0x2, 0x4, {0x2, 0x40}}, {0x5, 0xb6c, {0x4, 0xffffffff}}, {0x5, 0x924, {0x3, 0x800}}, {0x0, 0x8, {0x1, 0xfff}}, {0x5, 0x7f, {0x0, 0xffffffd2}}, {0x1ff, 0x9, {0x1, 0x2}}, {0xffff, 0x200, {0x1, 0xf0}}, {0x101, 0x1000, {0x2, 0x3db4}}, {0xed, 0xc64, {0x3}}, {0x1f, 0x1, {0x3, 0x7f}}, {0x2, 0x1f, {0x1, 0x7fff}}, {0x9, 0xffd, {0x3, 0x7ff}}, {0xdf0, 0x6, {0x3, 0x40}}, {0x7fff, 0x9, {0x3, 0x10001}}, {0x401, 0x7e3, {0x0, 0x9}}, {0x73, 0x8000, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xd156}, 0x5, 0x81, 0x3ff, 0x9, 0x9, 'syz1\x00', "0c61a4e163a811cf41508efda71de579314b5af4771fd8e4af5d0b764a7a57ff", "3bd8a8b2280d7822954d93acb49d3a4e9caf66f360fa338c104eeb8f193432ba", [{0x1, 0x6, {0x3, 0x7}}, {0x1ff, 0x3f, {0x1, 0x6a017d92}}, {0x70c, 0xf77c, {0x3, 0x8001}}, {0x4, 0x7, {0x2, 0x1}}, {0x5, 0x8, {0x3, 0x1}}, {0x1, 0x3, {0x0, 0x8}}, {0x85, 0x0, {0x1, 0x401}}, {0x7, 0x7ff, {0x0, 0x2d}}, {0x8000, 0x1, {0x3, 0x7f}}, {0x6, 0x4, {0x1, 0x7}}, {0x9, 0x1ff, {0x1, 0x9}}, {0x7f, 0x156, {0x1, 0x4f}}, {0x4, 0x0, {0x1, 0xffffff01}}, {0x1000, 0x7, {0x0, 0x7fff}}, {0x4, 0xfa, {0x3}}, {0x0, 0x400, {0x1, 0xfffff800}}, {0x40, 0x200, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0x9}}, {0x1ff, 0xffff, {0x2, 0x80000001}}, {0x8, 0x6, {0x1, 0xffffffff}}, {0xaf35, 0x3, {0x0, 0x6}}, {0x4472, 0x5d7, {0x0, 0x5}}, {0x7, 0x7fff, {0x2, 0x8001}}, {0x81, 0xe57, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x80000001}}, {0x5, 0x6, {0x1, 0x1}}, {0x2fc9, 0x1a, {0x2, 0x3f}}, {0x0, 0x8, {0x3, 0x1dd}}, {0x0, 0x336, {0x1, 0x6}}, {0x1f, 0x8, {0x0, 0x5}}, {0xd5, 0x2, {0x2, 0x100}}, {0xa928, 0xffff, {0x3, 0xfffffffa}}, {0x1ff, 0x9, {0x1, 0x40}}, {0x1, 0x7058, {0x3, 0x4}}, {0xffff, 0xfff, {0x0, 0x80000000}}, {0x81, 0x6, {0x0, 0x401}}, {0x6, 0x8, {0x1, 0x1000000}}, {0x6d, 0x8}, {0xcdd, 0x200, {0x3, 0x401}}, {0x6, 0xe9, {0x0, 0x401}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 256.631123][ T9257] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 05:17:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='limits\x00') syz_genetlink_get_family_id$gtp(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x3, 0xa22]) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x1000000000000a}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netlink\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = accept4(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80, 0x80000) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000080)=0x10000, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000240)=0x200000, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005000)=0x14) 05:17:07 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fc0009003c0800240042ef42000000010902"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f90000082505a8a40700000000010902240001010000000904000012070103000905010200ffe100000905820255"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000180)={0x317d}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(r1) 05:17:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='limits\x00') syz_genetlink_get_family_id$gtp(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x3, 0xa22]) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x1000000000000a}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netlink\x00') sendfile(r1, r2, 0x0, 0xedc0) r3 = accept4(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80, 0x80000) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000080)=0x10000, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000240)=0x200000, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005000)=0x14) [ 257.486164][ T2590] usb 4-1: new high-speed USB device number 2 using dummy_hcd 05:17:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x4a10, 0x5, &(0x7f0000000540)=[{&(0x7f00000001c0)="94f668851cea0f40157686dc2e98d4e0bfc15fbe341d59753a46f514a30eb570c426d75c1c", 0x25, 0x5}, {&(0x7f0000000240)="bd101d148c1598f96ffca41d9a3e9854933b601a25d4060d520177e325312ab4670449995a104c03e6ad4b72934e35855c0420237c92906d8e33b9010b23581780764994d97f5ad2a6b0042682877bf9ae25f52740d8c9f2e42a35fec29b9d69d56d06815a5491a893318ea10f6fc4c4c3d6c2a9e6770a9c3603758bcd9a43d090eb7d02a443c2acf2a3cd994f1d217e34a197e4c8cfc9682669b08754bb814e987ec56ecd33809fa50f7180cd24c30618db04a33028c1523647c3ec132335fe9701059a675aa968875af861620fdd61e86c8febfd1a2bcb73007857e4a5bf40108156a6a962cb", 0xe7, 0x6}, {&(0x7f0000000340)="9b896651f938246cc1745b041d62fe77fa8072e6a963b7e9ab583c54d550b4508283568b7526cca4aa7a4dd30711551ad832783c564418e8c5ec3b2c6940691cf61ae409ee9990f797e1950bfe524f1fdb042527e4c129666690c4aeca39dde93e547f6bfa535db32711f56894de57a358ff3fd04945fb5ec2562adaafff5b5cb66ccd511c5ab43986fa8d4a9186d660ef39343fa17403b3b5912e6ec345c40f265889f35481c0525309d5e5199853f7e568a6937771fd47d56b3e8ae47e5288430908b40d54c6", 0xc7, 0x80}, {&(0x7f0000000440)="9471958222b9a0b3e91ca9c025266bd57621d84b37f34a5bbda1b3b4b9abce833b06a230991cbf6dafc929d70ec394ffa68bb5eef77d4ad645062eb75d1441fa72904befb9b9f04e4c20712e52e5a32635fd188e719e2d79471e08d0e1e9c203290ed73dda34efa9c69885e4e283584820d5ec7d61eb3b816ee2d64b6d7eb6eff825b3b9e9ae5af0b5cbffef80389845337e13da97a9e801c382e309f8aa76f0d0fb659d7f8769f6ad970e9a862e1cef", 0xb0, 0x1}, {&(0x7f0000000500)="016b1558a1bed43086111d7116eb776a003c6da8d8bd25d50be6", 0x1a, 0xec3}], 0x88410, &(0x7f00000005c0)={[{@map_acorn='map=acorn'}, {@map_acorn='map=acorn'}, {@utf8='utf8'}, {@map_normal='map=normal'}, {@norock='norock'}], [{@fowner_gt={'fowner>', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.events\x00'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x76, &(0x7f0000000140)={r7}, 0x8) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x11, r4, 0x58000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r7, 0xff, 0x10, 0x3f, 0x401}, &(0x7f0000000040)=0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0x400086) bind$isdn_base(r9, &(0x7f0000000640)={0x22, 0x81, 0x1f, 0x6, 0x4}, 0x6) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000080)={r8, 0x9}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) 05:17:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="97ca"]) timer_delete(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) [ 257.736199][ T2590] usb 4-1: Using ep0 maxpacket: 8 [ 257.856445][ T2590] usb 4-1: config 0 has no interfaces? [ 257.861972][ T2590] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 257.904991][ T2590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.970605][ T2590] usb 4-1: config 0 descriptor?? 05:17:08 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500080", @ANYRES16=0x0, @ANYBLOB="00000000000000000008110000000c000280080005000000000028000380140002006e6574706369300000000000000038bb8e4fbb0800060004000000"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x400000000004ffe0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) r4 = socket(0x2, 0x80000, 0x0) r5 = socket$inet(0x2, 0x6, 0x7ff) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x76, &(0x7f0000000140)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x7, 0x0, 0xea7}, &(0x7f0000000140)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e21, 0x7, @private2, 0x7ff}, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x8000, [0x7f, 0x8c5, 0x81, 0x1f, 0x1000, 0x2, 0x6, 0x400]}, 0x5c) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0102040f00000000000010000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000128c9940000000000000000000500210001000000"], 0x1c}}, 0x8000) 05:17:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="97ca"]) timer_delete(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"f0b53758c27c8a5122495e94c6eea4b1d50e4a3d3e845b99f4aa27f37d0e0d99b0f2d055677844677df02303e511c57fce0804cbd788839740eb2818733f7d6353ac4f6a976f555a80b9d5e5c2e630e51cda508597da028ae95bdf0d86474b6c40fb9d532a8c207630125018720c2dcf7c576d227d409944dcf4ec42323ad648ae8ab9b7fe50002ed75c65634d06b007ac95f74e35b46195b559da837cbb0d241ddb343ecdc48134313af9653ded9e754e5532e891c2fd0775b16a9d2b9e2ff46b6663be2de6a7311db85ffe25fec786d9523bfb25033aa8662237b524246ec7e40018c0e8f4da74e0a812b2958af57ccb598f442916c70d55887ef79d3077a657dc14de53ec2e90335c49e6e5e2239bc50e82c4bbaceaa2cf5c3989321672e9a8a42f8aa372eadffc80298b2209033dad6db9d9a1eaadb8e0be6d8a6e2e349fc7499b1f1f852e1d16b9f18e6394c3c78c64c51e98e0ac93b8664e9c07b2243797dcf8d93e8365dc28456490378a75c1e449341d2b5790887fe99f0b022f45a04dcd47879cca0da74c9575ff9012926941ec8e7ecb095eee1d69828c4b3de947fb8938b1fc929c3202213b14bf5d638d0b407196f8e2fe0689059608e532e53c218d595a0eae9a4bb0c976b31565359934fa6d257d1bc308017706109a225d4f1d64681c764dfe9883f064b96a182feda5de86ad9c5c291937bea7b526653b0265b092ea5a1fd90d2b38d79d6b882750add2cd8658c644d562585fc433bf9d2abe226689c91722290b11899766434230dea0675a53cf18156fae464dbea2bd3722ad554d612550132728270e5100cbfb47cecddb798a5d67d3bbb2a7b3b052b47dc4bc889a2232cfdc16fa148bac63fa46e219365d9a1d5a865039e19f442426b4b49f9c9670bf0d78a3ed841dc8af14a852981e0f20624e9375ade93e0e75e616915626ee2163dfa7f24e44727c2205214c0fcf8cff1d868ee12fc25c0acaa489a8939b2319582f18da1e0915130262948eafd69aa8f276409d0ca8eeecade323edb16c757e499a6467db54164a2a0ae415b39dd0d7e3b3f25e73e175783c4dc9da1c54721d905b543124e5a3c4db8a57979924ac57274ebf96d5033c9b7c92b61191fb6d00f8618dc15784c3fb45777cfa1d8c8d03c0894b43c7aebcd50a2631f7614f4f2e44f8bd8260dcd8b31f8890b2f17f642933a59ca520c43ec8a622d75cad20c8a71a91c41ca19789d64c18c20088773485c4012b16a02c2bfd950c9e766cbda9487919daafdc5ceba381d2946d8e408643289fcce62d5bb35168775e4371b8a43e3d78078403117d02d5024bdbafee079ab41b45f58f56f797b4bae21a254d53f2db45ccf272664cd2cbafeebec6bff3b4a1d818b7e520385ab3502fdb154ca1a84f3f0bb59c9cbb8156efd0b26c7d75d46c6704e7f32791009226"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) [ 258.250785][ T2590] usb 4-1: USB disconnect, device number 2 05:17:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="97ca"]) timer_delete(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) 05:17:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000564000)=ANY=[], &(0x7f0000000000)=0xffe4) 05:17:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x14}, [@ldst={0x5, 0x2, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) accept$packet(r1, &(0x7f0000002880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000028c0)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002900)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e21, 0x1f, 0x4e24, 0x4, 0xd, 0x0, 0x80, 0x3b, r2, r4}, {0x5, 0x200, 0x1ff, 0x40, 0x100000001, 0x836, 0x1fd9, 0x1}, {0x0, 0x9, 0x35, 0x8}, 0x6, 0x6e6bbe, 0x2, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d3, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x3, 0x3, 0xc, 0x1e43, 0x2, 0x1}}, 0xe8) 05:17:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x7f3483, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) read$FUSE(r1, &(0x7f0000000180), 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001180), &(0x7f00000011c0)=0xc) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x76, &(0x7f0000000140)={r6}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r6, 0x6}, 0x8) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0300000000000000feff450000580000000000069078ac141400ffffffff2400880b0000000030000021000086dd080088be000000001000000000570000000000002c0022ebe578e3e342549e82de5036944d18f5000000000020000000020000003c565ff4ed"], 0x62) 05:17:09 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) accept4$unix(r2, 0x0, &(0x7f0000000040), 0x800) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$RTC_PIE_ON(r1, 0x7005) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f00000005c0)) 05:17:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) ioctl(r0, 0x1, &(0x7f0000000140)="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") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000040)=@newtaction={0x34, 0x30, 0x53b, 0x0, 0x0, {}, [{0x20, 0x1, [@m_simple={0x1c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x4}]}, {0x4}}}]}]}, 0x34}}, 0x0) [ 259.975599][ T2590] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 260.275644][ T2590] usb 4-1: device descriptor read/64, error 18 05:17:10 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r5) close(r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 05:17:10 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20000000000000, 0x400000000000000, 0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000002c0)='./file0\x00', 0x741996ab, 0x5, &(0x7f0000000900)=[{&(0x7f0000000440)="ccbc34f85cb8b2778973c0a7116e6865f0b0d49f84a8d0e3068905b5adf201c5db839179a47169580ef7b12b2f401e55533214e5ca4ab58d9b472a38e97224f7ae342a978dc70ca2a1cabc9b8b70a09e8d3177cbbecf0b4eb578fec69ff106764497e816d789afff4f19892c95e8bce32745561287c55ef335b2e3234331f7f3c858db0b855e18fe1d3acd223ed8d17079d90007a1a58f8af49e020346e72f77932ec1b96c48b53c42afaa444c4633345095ab48ab3e62f73a75d75a15bd6b05d42956366ac6cb96e5f14a2672e3146736f269b6e473423d4a3bd270faab8eb3a92576ee61f013", 0xe7, 0x6}, {&(0x7f0000000640)="8f01a2183fb64932a95ff222a778feac61a6db0717f1940e4cfc627e1dc7e2f0a4072ccde2b46921e642f3d23d97eef8509d34d9b98740d249364372a1bada1a0678bac95be4e7a8cd6023280d08dd91349309c9daf3b7becd4672c55019481a41a2c97aa1af2bf960fd2a4b7bf4df8bc4975409843fc8ac7167a44eaf565c5374325dae23e03c587b319cedddd2e8188996b123befbfd8e915173743360aabebbd8fbc094", 0xa5, 0x5}, {&(0x7f0000000300)="57f16dbd92d6ff91bbb63f", 0xb, 0x7}, {&(0x7f0000000780)="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", 0xfc, 0x800100000000}, {&(0x7f0000000880)="79864bcf95ff42404bedd4f7029f020ec385e9cae81d0395bdf1d704e66f8690d2e9f7e65e621f8c648b0e6bf5fafa152ebfcb51a9081480b4f028b8c05eec023ef3dfe7e3cd3a07e154f7d0ca67ef1c46f7af1280e7e51769bc672d", 0x5c, 0x2}], 0x40020, &(0x7f0000000540)={[], [{@obj_type={'obj_type', 0x3d, '.\\{:)'}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) io_uring_enter(r3, 0x80, 0x3, 0x1, &(0x7f0000000700)={[0x9204]}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:17:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) mmap(&(0x7f0000b1e000/0x4000)=nil, 0x4000, 0x3000007, 0x2010, r0, 0x0) r1 = userfaultfd(0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x62101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r3, 0x29, 0x6, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r1) 05:17:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) mq_notify(r2, &(0x7f0000000080)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000040)="6ba33467f5545c82145a61f6984c57bf05ec669d0ffdb8838d04cb27f4f672b8d89a0b2c9fab14a9e9d4a2cd322baa5b29ebb860e5f1ec5645a6427afb4faf0c", &(0x7f0000000240)="62c8481ae0455c1329949109b0d19ca54769fe6bfc7ff39be7065d41181e3628bd8253d77bb393e34814c1bf877fb85c28846c1ccd86569141e2d9c031249fca681de0f3c9de600b7e6e8a153d37b12c9a982290e1a86d12ed721401adf4ca037112f59fa4ac7469557d7afe0f14d2afafe98d3ca1ed6971722ed203af594de316122e86729c61ad07967c9a252950d537f0499a67a597e0a6d909878d53e272c1531f38d0d29bcd736ff5bd85073acc9d9bcc9b"}}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) [ 261.225536][ T21] tipc: TX() has been purged, node left! 05:17:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) syz_mount_image$xfs(0x0, &(0x7f0000000080)='./bus/file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x8000}], 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="6c617a7974696d65cafb666f776e65723d000000000000000000000008", @ANYRESDEC=0x0, @ANYBLOB=',defcontext=system_u,fsuuid=c\x00\x00\x00b98\x00-\x00\x00\x003-\x00\x001\x00-\x00\x00\x00\x00-e\x00\x002b\x00\x004,\x00']) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)) read$midi(r1, &(0x7f00000002c0)=""/4096, 0x1000) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 05:17:11 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(0x0, &(0x7f0000000380)) r1 = socket(0x27, 0x0, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000000)) getsockname$tipc(r1, 0x0, &(0x7f0000000080)) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) lstat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000580)) r4 = syz_open_dev$loop(0x0, 0x4, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000240)={@any, 0x1}) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x114, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x68], 0x2, 0x400, 0x200, 0x0, 0x47fffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2801, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x8000000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={&(0x7f00000001c0), 0xa}, 0x18136a86e1939598, 0x40, 0x5, 0x7, 0x0, 0x8880, 0xc23}, 0x0, 0x10000e, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) io_setup(0x2, &(0x7f0000000180)) 05:17:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@sunit={'sunit', 0x3d, 0x20000002}}]}) 05:17:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x101}, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd, 0x1f}, 0xffffffffffffff75}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="7d5ff4494e413a", 0x7}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708080000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00000127bd7000fedbdf2502902009ff04001e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x0, 0x92557764ce1b3ff1}) r5 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x3ff, 0x0, 0x1ff, 0x4, 0xffffffffffffffff, 0xff, [], r2, r5, 0x3}, 0x40) [ 262.108287][ T9400] XFS (loop5): sunit and swidth must be specified together [ 262.457017][ T9353] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 262.493631][ T9353] ref_ctr decrement failed for inode: 0x3df3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a4955d57 [ 262.537198][ T9353] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 262.565213][ T9353] ref_ctr decrement failed for inode: 0x3df3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a4955d57 [ 262.861289][ T9352] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 262.870683][ T9352] ref_ctr decrement failed for inode: 0x3df3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a4955d57 [ 262.890439][ T9352] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 262.901383][ T9352] ref_ctr decrement failed for inode: 0x3df3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a4955d57 05:17:13 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000100)=0x1, 0x4) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r4}, 0x8) close(r0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) splice(r5, &(0x7f0000000140)=0x40, 0xffffffffffffffff, &(0x7f0000000240)=0x1, 0xffffffffffff8000, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r6 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x208200) sendfile(0xffffffffffffffff, r6, 0x0, 0x18000fffffffe) 05:17:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = getegid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000180)=[r4]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="0200dd21", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="040007000000000008000000", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="10000700000000002000070000000000"], 0x7c, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7, 0x1, 0x101, 0x3, 0x4, 0xffffffff, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) rmdir(&(0x7f0000000480)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0001a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 05:17:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, &(0x7f0000000340)='lo:\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x10000, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYBLOB, @ANYRES32, @ANYBLOB="8487b51f46b71cc5e74adbafe9addaf86937a5a80fa0e0e66e9793871f19018518c0017748cfda83", @ANYRES32=0x0, @ANYBLOB], 0x8c, 0x0) [ 264.125982][ T28] audit: type=1800 audit(1592457434.359:16): pid=9432 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15914 res=0 05:17:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) open(0x0, 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1'}, 0x4) openat$vcs(0xffffffffffffff9c, 0x0, 0x228240, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fchdir(0xffffffffffffffff) 05:17:16 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r5) close(r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 05:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, r3) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r3) r4 = semget$private(0x0, 0x20000000102, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f00000000c0)) semop(r4, &(0x7f0000000000)=[{0x0, 0xffff}, {}], 0x2) semop(r4, &(0x7f0000000000)=[{0x2, 0x0, 0x1000}, {0x2, 0x3, 0x1800}], 0x2) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) ptrace$getregs(0xe, r6, 0xffff, &(0x7f00000003c0)=""/243) 05:17:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') r3 = syz_open_dev$vcsn(0x0, 0x0, 0x90800) r4 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x204600, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x400c802) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x400086) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0x400086) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x400086) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x58bf20bd00c1ecd5}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffff0000}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20009044}, 0x4044810) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000d10001fff000000000000000000000000312b66b23404ada43428f8899d96178058370e687b2711587bb9f469acf787b7dd45acb02dbc1161cde1f73cfeb67730ef7bdddd4ed1d5c0578767fe05e72cc7d60c07c19c85003129ee2a6a6f3deebc324d39d333f1789f7386aa35208f839a732fc2251e83267465a25910bd1a4bce7c802fb52b91b1790ee2c517441be00752c6a93ef7bce6859d", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa1f0000"], 0x2c}}, 0x0) 05:17:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, &(0x7f0000000340)='lo:\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x10000, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYBLOB, @ANYRES32, @ANYBLOB="8487b51f46b71cc5e74adbafe9addaf86937a5a80fa0e0e66e9793871f19018518c0017748cfda83", @ANYRES32=0x0, @ANYBLOB], 0x8c, 0x0) 05:17:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) open(0x0, 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1'}, 0x4) openat$vcs(0xffffffffffffff9c, 0x0, 0x228240, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fchdir(0xffffffffffffffff) [ 266.663468][ T9453] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 05:17:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r5) close(r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 05:17:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xff000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141440e0", 0x0, 0x9}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = pidfd_getfd(r1, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251b0000001c00228008000402080000000800050009000000080006000500000008000100030000000700210061610000bbf067ca4f31d70862b6fb8cf4d47641fc30c125141e76a23408f58d3322aaefb2affae135d92c09b52e16e6213a44020eb6ea218108025406400ee4a60248a97b48af98cbfcaca6bced5de900d66d000866ea91b3c132ca4ee22d8d69e3941ac368187e65d7a85e698db48a56ddef8fc9b76cf018d23159805334e70dc7ef619481034112c91424da4cb12851ddb2fbfdaeb92da3bc74d2f4e4d49d7dcd12337538c0b73ec4a08deee74ad905727b3ec5bcdcb9144309d1708bbf31afffac47f95c0000000000000000567e224e853839426d02e989ffdd55cffa5d7660e35d4d3ac1dc63a69f854cf0e26c8f93eb318587b5fe7ef4cfb5e315fbd350"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0xdc, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="94d4dbfd6d42"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x74, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "56578bf72bebf8c886c3f785c3"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6e9a5e343ca4010a328c40f20f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06e5f8a954"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "402e06010d0665df55e578f47b"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6c2b5b8c134262b03be4cc6f7c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "f9459d160428bc6ec1c26f86"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "baccf646d9b9278f4dabe154f04862"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24008046}, 0x4000) 05:17:17 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1fd, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@remote, 0x14, r2}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x400001, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r3, &(0x7f0000000040)="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", 0x0}, 0xfffffd38) [ 267.605557][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.921934][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f3007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487509101cba12c07d57416ae9eeefc0e9c60ebab1c17682dc2b9381b72b100d0682fd0a0c4906b29e220dc28dac72597ef18dce992d0ba397409456d4c4e6f638ac947b5e026a3287c84ccc727d6e4293812e927c01c7da1322da44c7f2ed1084aa2f56d1cb398dff1db3df9858837458a4ca03767c69b25f2a2b7b96b0d0b4af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8674c644dca3286551d8efa6256f1fe50917b2c6b05e6001c29d7ca47dc62a087cc7f0e053927bc50e40a369aba3b08f0a8620c4d29eff8408ea28a6cb9fc8e7d360fced56ead5fa0c52f90bafb888e01aa8d5d70cf2ec06edc22ca72157000b8beb850e2007f6118f6df8235d0fe1428c367c2d625414413dc04d025d4a6b727e1cd4bd9c6e123e37c81955021bd6901005352068bc40073b07ebe8e7023fb0ce22c76445275d13012e6d6e8304744704a88401b58461f89c9de98bbb0b91f080a0a6c0880e71efc8444c7a0bafa52c316250c709216f24d9e8ceb6ef708d56be4548dc36a359f0753174b766e0cfd836d81f7a18e02999483fc914f98eed61b12d87de304d73f4551301a24652a2c539c24af27a773bc206164fdda25bc2866f5fb64ed65afeefcc34c56040bf4c1315da2b2cbd54e4061eeef8aa908eae11a97af000000008b335accc588a66ce3155c7d14504a2c8e7f8ec8dd6ef48546127593b8b230c249695162aa04d014e935b4a10d5d8a4dc4ad752968981692612a6f7c93df32ea63b18ce9c3faa3e82ce9ce755b8127329495faaeeaafeb8a06db79334b94c06e9c58bf51d551471ad77c4db23ac9a11fa42a3df2e91155d8c4c72cdbbbc08ca1b02c9c7869129f3335c0391e73458fd94675583fb71fea463a3d3c88b0d4b07fb65c658ab8181e11ea9ed4430cac9da320b7228229778b93e30ebcdfc9e7abf1fbb8ec146b0f8c40e06f93b310f44b64b47cd6e1d989736ec9dbc08836a7d7d4f1a422c9ec3fb9346a59f80bc6403ed89a47373534822c3eedc3566062aaac6eac8e6fa89e950b0a175737eb8fd5b1a60a3b07cc11669c14245ec90000000000000000002e4936d62ea967806def9c0f660e31ae510324f291619c9774012dc25becb0580b7769a045cf5d5247304b7bef6a670e9f210e767dd6b642f6471210b913d9338d093923732087798b86eeb92c95ce2917bd53d85587119c428c622335f7b720c5a2421ce526130214eaefbf157ffe18019629ee2fa725b1ffadad6b9031cb77bbd70891225b374e1f685b69422f75ac59a5faece0bd56224de22a36e67399ac7ec683ef9754e545aa0d6dc13fca61a5e529db342b6b7c21ea0b27a2ac0203ad6ceca4e21ae99beccd9d8a1d88cd1c9285f9489f3ee4b851a2b09ca3864fb4db860a3ad8ae30e486f416223c3e73ccef12ff664eb3660c2756bc5981883f5ccbdea1e280d2cd8dd22316eb41b5374909088016b4616d517f38121f272ac5963cb876322b6e78efda249db1de2b52afe02d16de1dc2ed869dcfdf860ac73cf8ac1be479b1267fdf893285343a511aba95ab0bd168dbf5775a1b1b56c55e0d10a8b837fb0000000067eb8c47958d2911e21570491b874afc2a2d54ad7e0492d94f3931b625e4926be5ef329b285c2a75450000e148daed5a989314d780fdb5680cfe8171f6fdb0933f12a8ea5b5d21972c41a499aa2f45578cd39e28be0b0b6bfd3a39acb8887011841a63cbcfffb20b02d7de905c24107652fa9c4cf8859be6bfb4e62bf0da720abb97a3a5e0090ec64b7e7b41e21ec4f99342fe49058d393120e2341748a6ad4d4817270558005097640935fec6638f3d36727f9a7b9c6900000000000000000000004a6c779b13dc02780127f939dfa4a84b6844f2d09b5a0bd4e9cffcaac295b8a1799f06ef686c8c56a9ee804bc64e7ad02cf6cf522df3171670f47069b1e799"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xff000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141440e0", 0x0, 0x9}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = pidfd_getfd(r1, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0xdc, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="94d4dbfd6d42"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x74, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "56578bf72bebf8c886c3f785c3"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6e9a5e343ca4010a328c40f20f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06e5f8a954"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "402e06010d0665df55e578f47b"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6c2b5b8c134262b03be4cc6f7c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "f9459d160428bc6ec1c26f86"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "baccf646d9b9278f4dabe154f04862"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24008046}, 0x4000) 05:17:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x7, &(0x7f00000000c0)=@raw=[@generic={0xea, 0x8, 0x5, 0x2, 0x6}, @call={0x85, 0x0, 0x0, 0x29}, @map={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x96, 0xc, 0x3, 0xf3f, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000002c0)='GPL\x00', 0x6, 0xbc, &(0x7f0000000300)=""/188, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) [ 268.471673][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@local, r2}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aa9caaaaaaaa4180c200cb5f4968b2fc6195a4bd002086dd60005cbd001c0600fe8000000000000000000003ff0000bbfe8000000000000000002ca0d29c8b6961a05fb3740f7435b6a33a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c2000090780000fe03f989c4b2c400"], 0x0) 05:17:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x31, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) clone3(&(0x7f00000006c0)={0x82200500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) 05:17:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r5) close(r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 05:17:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x1}, 0x40) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092293e41df4f0e9da4f6e4014f1e9a6445a10a7e45559a57c15ceda085cc3f4f884c4af90a0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d30600cd6b3e5903e1ddb592e01314d94b96eb154cdac3a67f706eb14c1d3d1a7516847479f02b2e5f1367284d9f0000000000007920f69e068d2c7faba4084e7a3b0c6c699890"], 0x131) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86ddf20800183affce47fcae65c2000020f36787e9c2feca2d0000000000000002000000000000fe8000000000000000000000000000aa880090"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2, 0x1) 05:17:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x31, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) clone3(&(0x7f00000006c0)={0x82200500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) [ 270.400532][ T9510] ptrace attach of "/root/syz-executor.1"[9505] was attempted by "/root/syz-executor.1"[9510] 05:17:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, &(0x7f0000000340)='lo:\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x10000, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYBLOB, @ANYRES32, @ANYBLOB="8487b51f46b71cc5e74adbafe9addaf86937a5a80fa0e0e66e9793871f19018518c0017748cfda83", @ANYRES32=0x0, @ANYBLOB], 0x8c, 0x0) 05:17:21 executing program 4: r0 = socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x327, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "ed3049", 0x2f1, 0x21, 0xff, @empty, @private0, {[@srh={0x1, 0xa, 0x4, 0x5, 0x7f, 0x50, 0x1, [@private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private0, @private2={0xfc, 0x2, [], 0x1}]}, @dstopts={0x87, 0x1b, [], [@calipso={0x7, 0x28, {0x1, 0x8, 0xa, 0x400, [0x7, 0x100000000, 0x77, 0x4]}}, @generic={0x6, 0x89, "26de680eb9c1debbd3695d6f3c89ec9a03cec8dc11c68714ef0090c63b32ea5736b768693c86c4391699a64dede8d6beb4af8f37793788b83bccb8d5ebe9ebba5b2701957323ac75ecedaecb68fafe2ebd08e3f4585c6f72c8bbbb3c7aa303cbe279b4810a5c09c4933b9931d1f2e9ce162462616e5fa90e07eaf7808ad300459b24dc535426a9374b"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x20}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x91, 0x4, [], [@enc_lim={0x4, 0x1, 0x6a}, @calipso={0x7, 0x20, {0x3, 0x6, 0x21, 0x7f, [0x9233, 0x4, 0x15]}}]}, @srh={0x33, 0x4, 0x4, 0x2, 0x9, 0x8, 0x1, [@private2={0xfc, 0x2, [], 0x1}, @empty]}, @hopopts={0x11, 0x7, [], [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @loopback}, @jumbo, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xfff9, [0xffffffffffff7fff, 0x0]}}]}, @routing={0x2e, 0x2, 0x0, 0x5, 0x0, [@local]}], {{0x4e20, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, "16c455", 0x8, "2d69f3"}, "49e655f0b49960d0c874a2432dd289c60296bf034215db5e95ee66f899952401f9e4bd3e713dff202c1b4fb748d7e6af0413348ff26a6f36a85482306162099bca95edde0b918c4d8d3dcb7f52759f39106444a0ccc093ee7db9ab8528a50be5dd0fd03605c54117b96df9b0669d35e6e5c00d82c5f2ab4d0abaddfd1e9c6cf93645520117db3f675ad84e9d86cc898017c5aecbd8d0d8db982bf27e02376bdf119242bb56e1ed7e6b378c8e735c148cdcdc67d7bb46498de0167f8996ced49e86654a704761a90b7191940339cc577cda1a514173514f81f890070bd0e9bd984dbcc90cde4bd46c4d723218390d1e4d17"}}}}}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@private, @in6=@private2}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r5, 0x0, 0x80000001}) [ 271.117495][ T9462] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 271.129521][ T9462] ref_ctr decrement failed for inode: 0x3e35 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000233abfe0 [ 271.159584][ T9462] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 271.179145][ T9462] ref_ctr decrement failed for inode: 0x3e35 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000233abfe0 05:17:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') socket$can_raw(0x1d, 0x3, 0x1) 05:17:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) r4 = dup2(r0, r3) write$P9_RSETATTR(r4, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) 05:17:21 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c004}, 0x40040) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x4}}]}, 0x30}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f0000000040), &(0x7f00000001c0)=0x14) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x2b}, @rand_addr=' \x01\x00', 0x0, 0x0, 0xfff7, 0x800, 0xc5, 0x10, r2}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x80a, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 05:17:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) getsockname$unix(r0, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="925922e613decea33b871a8c5cff3985c926f1d12e52880d1b0d9bc370f6397786116ceced8067c0482a9a51b9408bfde9bfba64"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x8001a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x40080) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) [ 271.879875][ T9534] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.952589][ T9533] XFS (nullb0): Invalid superblock magic number [ 272.041689][ T9508] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 272.130888][ T9508] ref_ctr decrement failed for inode: 0x3e3d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000021173739 05:17:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) getsockname$unix(r0, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="925922e613decea33b871a8c5cff3985c926f1d12e52880d1b0d9bc370f6397786116ceced8067c0482a9a51b9408bfde9bfba64"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x8001a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x40080) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) 05:17:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f00000002c0)=""/112) [ 272.238230][ T9508] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 272.296604][ T9508] ref_ctr decrement failed for inode: 0x3e3d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000021173739 [ 272.328060][ T9533] XFS (nullb0): Invalid superblock magic number [ 272.521849][ T9564] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:22 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00'], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/159) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) mlock2(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0) pipe(0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/100, 0x64}], 0x7, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/232, 0xe8}], 0x1, 0x0) [ 272.962083][ T9571] Unknown ioctl -2142720410 05:17:23 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r5) close(r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 05:17:23 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c004}, 0x40040) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x4}}]}, 0x30}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f0000000040), &(0x7f00000001c0)=0x14) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x2b}, @rand_addr=' \x01\x00', 0x0, 0x0, 0xfff7, 0x800, 0xc5, 0x10, r2}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x80a, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 05:17:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) sync_file_range(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r0) [ 273.351550][ T9590] XFS (nullb0): Invalid superblock magic number 05:17:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, &(0x7f0000000340)='lo:\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x10000, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYBLOB, @ANYRES32, @ANYBLOB="8487b51f46b71cc5e74adbafe9addaf86937a5a80fa0e0e66e9793871f19018518c0017748cfda83", @ANYRES32=0x0, @ANYBLOB], 0x8c, 0x0) 05:17:24 executing program 1: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000041c1, 0x89000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x100, @remote, 'geneve0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2800, 0x0) write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x1000, 0x2, 0x81, 0x1000, 0xc01}, 0x86, "22d71a52597d87e79b567a56fb9adc2ef7ee05af2851252b710677c007be1889385ce2d6bf5072e3f6a2582be68dbc68166a851e4f973133b7e794a1107a3aa88b211f4d71b4154f791758b917187b8cc49554594a9554306295eb19195560c3fcd47463e1522c37125c700f864f4b708d975c18ff6ff93d84e45fa84e925ccba51379fdc2ce"}, 0x98) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 05:17:24 executing program 0: unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x207, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ptrace$setregset(0x4205, 0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000040)="78ea83a5a1c739f96221f2e44ed21b08c7882b2653051c6a91a6352c75eead539b306aab213b4083eb7b4bcaa57095a0cd0bd2347bb188c1f254d4ab91e0f85321c8e63d46889fc5cd24f94fc3c3f92a88929b10323218c1d106876ae6f34a24", 0x60}) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000000)=0x1) setns(0xffffffffffffffff, 0x0) 05:17:24 executing program 2: nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000010301010009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xffffffffffffffce, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x76, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r4, 0x4, 0x0, 0x2, 0x335}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r5, 0x29, "2dc26fa187c66379cbadefa0f1451f14713e6395c328d19b01407f7078069ba78b87d4697daf9692c6"}, &(0x7f0000000200)=0x31) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="400c5108720062e7e1"], 0x0, 0x0, 0x0, 0x0}) 05:17:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000240)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000002c0)={0x5, {{0xa, 0x4e22, 0xffff8000, @loopback, 0x3}}}, 0x88) connect$caif(r3, &(0x7f0000000140)=@dbg={0x25, 0x8, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 274.332440][ T9600] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 274.351666][ T9600] ref_ctr decrement failed for inode: 0x3e3b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000bf629ee1 [ 274.378504][ T9600] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 274.392854][ T9600] ref_ctr decrement failed for inode: 0x3e3b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000bf629ee1 05:17:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x20008041) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000080)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000000640)=""/224, 0xe0}, 0x10001) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) [ 274.588462][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 05:17:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x1}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x180c0}, 0x10040802) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 274.733554][ T2590] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 274.947426][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.993469][ T2590] usb 3-1: Using ep0 maxpacket: 32 05:17:25 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x9e, 0x0, &(0x7f0000000200)="8e1b7ecef617ae88912eba4c0d89055c12b1a848a26329a758a67951637b9035bd47052df1314e2c1ef9ee14b6603915ef91d49b68c55bee35a3cab91f21b7d602de3d5a0a86e0470901feb9c7adcb3b2e85264a04aa2a225d32ad525cc0d2541c0149a8a9d10327543497af6fa35cd56f5b3b1833c657fac38e1dfa7771d47ce1a8235ca71c29ab4b8cf191f38ea8e850e5efd9b09a913f0beb2507b927"}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 05:17:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x25, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getnetconf={0x14, 0x52, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x0) [ 275.123840][ T2590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.172938][ T2590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.182720][ T2590] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 275.292956][ T2590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.317319][ T9651] device batadv0 entered promiscuous mode [ 275.345169][ T2590] usb 3-1: config 0 descriptor?? [ 275.394785][ T9651] device batadv0 left promiscuous mode [ 275.414718][ T2590] hub 3-1:0.0: USB hub found [ 275.623695][ T2590] hub 3-1:0.0: 1 port detected 05:17:25 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x18120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x24044000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)=0xfffffffc) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0x80, 0x0, 0x1e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @private0}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140), 0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 275.764021][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:17:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000400)=""/4096) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) recvfrom$ax25(r2, &(0x7f0000000240)=""/132, 0x84, 0x2002, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x5, 0x4) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="040005090000000066a3b3000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fmask=04000000000000200000000']) bind$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @null, @default, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 276.109910][ T28] audit: type=1800 audit(1592457446.341:17): pid=9676 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 276.349510][ T2590] hub 3-1:0.0: activate --> -90 [ 276.562850][ T2590] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 276.607362][ T9667] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 276.616116][ T9667] ref_ctr decrement failed for inode: 0x3e68 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d714dec3 [ 276.648770][ T9667] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 276.685786][ T9667] ref_ctr decrement failed for inode: 0x3e68 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d714dec3 05:17:27 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x5975c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="0fc7aa00000000c4e2613d770e0f0159f9c4c14458e466b8dc000f00d0ff14bd8f000000660f3881849ee700000066660fc7b006000000ea09000000c800360f01c8", 0x42}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="232117bbb7535bcb28161bcd"], 0xab) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 05:17:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000300)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x81}) [ 277.547232][ T9695] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 277.568608][ T9695] ref_ctr decrement failed for inode: 0x3e6d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000001d84ecc2 [ 277.607422][ T9695] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 277.633463][ T9695] ref_ctr decrement failed for inode: 0x3e6d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000001d84ecc2 05:17:28 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x52) close(r1) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) lseek(r0, 0x0, 0x4) 05:17:28 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x1fffc0000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000004c0)=""/241) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='netdevsim0\x00', 0x10) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0xfb80}], 0x1}}], 0x2, 0x24004880) socket$nl_generic(0x10, 0x3, 0x10) read(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x804021, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000340)=0xffffffff) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) setregid(0x0, 0x0) 05:17:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) 05:17:28 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r5, @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x42944, 0x8}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 05:17:28 executing program 0: perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xdf74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd46}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x50}}, 0x800) 05:17:28 executing program 5: prctl$PR_GET_CHILD_SUBREAPER(0x25) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000003c0)={[], 0x0, 0x40, 0x7, 0x5, 0x5, r0}) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x20}}, r0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000300)={0x6, 0x9, 0x1, 'queue0\x00', 0x8}) getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 277.835929][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.864722][ T9712] IPVS: Error joining to the multicast group [ 277.913715][ T2590] usb 3-1: USB disconnect, device number 2 [ 277.971324][ T9719] IPVS: Error joining to the multicast group 05:17:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000300)) setreuid(0x0, r2) mount$9p_virtio(&(0x7f0000000040)='syz\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200800, &(0x7f0000000200)={'trans=virtio,', {[{@version_L='version=9p2000.L'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@noextend='noextend'}, {@cache_fscache='cache=fscache'}, {@posixacl='posixacl'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{(\\\xf5'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cake\x00'}}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffff7fff}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r2}}]}}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000001}]}}]}, 0x40}}, 0x0) [ 278.020994][ T9724] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.113982][ T28] audit: type=1800 audit(1592457448.351:18): pid=9731 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15989 res=0 05:17:28 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) listen(r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='-\\\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\\-#(\x00', &(0x7f0000000180)='^\x92\x00'], &(0x7f0000000240)=[&(0x7f0000000200)='{]!@}}\x00'], 0x800) unshare(0x0) 05:17:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x103002, 0x44) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)={0x1, 0x3, [{r1, 0x0, 0xfffffffff0000000, 0x4000}, {r2, 0x0, 0x2000, 0xfffffffff0000000}, {r3, 0x0, 0x4000, 0xfffff000}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00') 05:17:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)={0x67, 0xc, 0x2, 0x3, 0x0, [@private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote, @local]}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xd6, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xa0, 0x11, 0x0, @dev, @local, {[], {0x0, 0x0, 0xa0, 0x0, @gue={{0x1, 0x1, 0x3, 0xaf, 0x0, @void}, "928a710e3b117e3dee5cce31aecba59dda9d841fefbe04d9fbc32f338fe1491d877e8c10f3eb3619cbc35cca89ef598c519bf404e074680a8abdb4750e2447a1b31ab409fd39fdfdc316d294ddc6a2757f4a271d19e5f84abc203b0a5950436a5029190b9806060b56205f1d170ea8fb80f06951777ad933649c71e3b1e32356468cf5337b406c74cf87cc1923bd2d9aa80077b5"}}}}}}}, 0x0) [ 278.395161][ T28] audit: type=1800 audit(1592457448.631:19): pid=9737 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15989 res=0 05:17:28 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x6, 0x400, 0x2, {}, {r7, r8/1000+10000}, {0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x3e, 0x2, 0x0, 0x0, "de224f6d08c978dca2e8ff5f7b8afeb94f25322823336a79df823fb9ee90a46848a37d917bcfff637eded812b1fa3f3369d897f2b0a144a5178cf08db45ef559"}}, 0x80}, 0x1, 0x0, 0x0, 0x13}, 0x40000) r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r10 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r10, ':chain\x00'}) add_key(&(0x7f0000000600)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x1f, r10) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r9, 0x68, 0xc2}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'blake2s-160-generic\x00'}}, &(0x7f0000000300)="1270a4ab96a5a4b9aacc53ada7b0455d873210efa6d9076db0eb735608947d030d4b4dabe40aeea83b97a41479bc2ed6217ccade1daac5a698eccdf7e0aed7a38c8f91e804e0441a7829b36246c945dce8021ffec53196060a8827a58a3cf0be43512b80d861a57f", &(0x7f0000000380)=""/194) 05:17:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x2}}) sendfile(r1, r2, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 278.626222][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.665218][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.668577][ T9756] new mount options do not match the existing superblock, will be ignored [ 278.682924][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:17:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x9}, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007", 0x11) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 278.794151][ T9756] new mount options do not match the existing superblock, will be ignored 05:17:29 executing program 5: clone(0x20006004f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000008193df5f000000000061118800000000080000000000000000a4ad01c2cdea88ff9da9747495237123e8d9b9fdfc9df9f52ac3884806dc0a7f7eb1b6dc0dced26aae61a2c6388e054a6a86bb8592ba9f53f3b60c5a542779a2dd9eef75856bcc207a546a22a4fd6be912d8f5ab93bb685def3490a558697f6a9491787debcea3e065e53b2c81fadf335a4486e6353613c30a6982bc703672d902f5ad9094ff9a0ec38f92f1c533759d84f24281eba959298911ecd03fb7c7a21f4260b1562f794066024cae58578fd3822ce302c4aa2887d0f59123bad537bf13b08846302ad154974957fd5701113053217c5842d06ce477076756eeb64bdbf1ef2e70d0"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) finit_module(r0, &(0x7f0000000040)='!(,\x00', 0x1) [ 278.940955][ T9752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.046866][ T9769] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.090088][ T9769] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.272082][ T9711] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 279.281880][ T9711] ref_ctr decrement failed for inode: 0x3e73 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000969601a0 [ 279.319302][ T9711] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 279.328355][ T9711] ref_ctr decrement failed for inode: 0x3e73 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000969601a0 05:17:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) 05:17:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) 05:17:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x100, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x1f}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 05:17:29 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="bb4cfa9c4f91ef5281cf4e1621"], 0x194) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xa00000, 0x9, 0x1, r2, 0x0, &(0x7f00000000c0)={0x9909e0, 0x7, [], @value64=0xfffffffffffffff8}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0x8, 0x8}, 0x1, 0x7fffffff, 0x800, {0x9, 0x1}, 0x1, 0x9}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 05:17:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xe0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) r0 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x3, 0x0, "a1c4ff1407b472765882a5e7d4520bac77a94acd4468faef29870b2468c2c952d81ded15286889ce609f9f258ea01abcc9effe184fd800187f8adfdb6ab3dc00025f1a0da06e94d68b106b0c755225afd1e59c5e4781ce61b98468354384429113574a4d43409d9b15519f1653cf5861d4eedeaf92fd59a6366b01a93082652056808694703550ac69e4e1fc41c4d763fce3329baca284601295292faf77618003df2aa47386ce8cd9b0f506c0eb11182332d8b7d6e92865b8f551d17d97b04b41f109b74a1f"}, 0xce, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r0, 0xd306) 05:17:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) uselib(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000200)={0x75e}) 05:17:29 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0xe0, 0x0, 0x0, 0x0, 0x41c1, 0x80261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x40054}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x82) sendmsg$can_j1939(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003300)="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", 0xfc1}, 0x1, 0x0, 0x0, 0x2c048010}, 0x801) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f00000001c0)={0x4}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "00000100"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000002c0)) r5 = syz_open_pts(r4, 0x2) sendfile(r5, r3, 0x0, 0x6f0a77bd) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:17:29 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095000000000000009ff0e184a99b6aae52"], &(0x7f0000000100)='GPL\x00', 0x0, 0xd, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r1, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x2, 0x3, 0x84) 05:17:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf1, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040801}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="857e00000000000000000f000000f13d5d8847e8269c26ade9488a9e5e32e6f2f228fe416dabc44cd940a1"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4841) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd14a}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@nodiscard='nodiscard'}, {@noquota='noquota'}]}) [ 279.684707][ T9798] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.743866][ T9801] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 279.753087][ T9801] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 279.767792][ T9801] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 279.780982][ T9801] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 279.866270][ T9801] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 279.875854][ T9808] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:30 executing program 4: write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1c29e1ae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x10) unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x4c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000480), 0xa198) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0xc4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x4202c0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="1e8c39f18e9872afa76de2add5e845572e3b2c461f5dc40bcbbff1f9c0d40ad6889cc3c931b21733a8d9eabf3afad982af011c505fb17b692f6406c4ae4c616890e38bc0f933d19bb8cb92be7b1cde89c2ab49f3ff3322fb2a9f666b1d63c63e4a28eca4de4a46e89ffc92b75d42d3864162d061e404bf5de030538cda9a19333505a1cf0047066df6602ee18cb85a70618f4794d651f544546d", 0x9a, 0x40000000, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) 05:17:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/120, 0x78}], 0x5, &(0x7f0000000000)=""/24, 0x18}, 0x3}, {{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/198, 0xc6}], 0x2, &(0x7f0000000800)=""/17, 0x11}, 0xc4b}, {{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/255, 0xff}, 0xfffff001}, {{&(0x7f0000000a80)=@l2tp6, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/126, 0x7e}], 0x2, &(0x7f0000000d40)=""/227, 0xe3}, 0x3}, {{&(0x7f0000000e40)=@xdp, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000840)=""/3, 0x3}, {&(0x7f0000000f00)=""/114, 0x72}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x3, &(0x7f0000001fc0)=""/177, 0xb1}, 0x2}], 0x5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 280.257305][ T9820] IPVS: ftp: loaded support on port[0] = 21 05:17:30 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000003c0)=""/145, 0x91}) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYBLOB="1f0000f2004686d3d265000000480100800b00010062000081676500000800028008001c000500000005002639002b000200000000000000000000000000000000149f9f4c57f57218d1f8310b0159dec0d01277238a7ac3477ed5e6b9511fd793b8aaf6a6f5c3501a28e88948fc2107f217b8b4cef40ccefdde5e9544efbeb4e846d35206f07f5b963c2895cbe9754b154d2ccad980a6882a8dce42c73857bbde5692e4a20a56df7249a22ed2591161864444afb38d9f01b62d78f868ad9362175b71b3f0bc5cce1c3409432c3e6a3c235e045ae4b8a6cd01ec88bd02b1832ea030f73528b2f19852f5337955fa91d2a004257d5437475507630000000000000017c898704e992649bc0991c214da73877290ae25c12b03bdd27d58ab92b40000000000"], 0x70}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r3 = socket(0x6000000000010, 0x3, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000080)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) [ 280.299189][ T28] audit: type=1800 audit(1592457450.531:20): pid=9822 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15960 res=0 [ 280.334114][ T9822] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 280.429952][ T9808] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.473548][ T9797] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 280.483591][ T9797] ref_ctr decrement failed for inode: 0x3e76 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000068aae062 [ 280.499767][ T9797] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 280.510636][ T9797] ref_ctr decrement failed for inode: 0x3e76 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000068aae062 05:17:30 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000de010004000000000600000037fcf085a84be00500000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040010000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="100000000000003d2000000000000000"], 0x54, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), 0x4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r0}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x1f, 0x9, 0x2, 0x0, r0}, &(0x7f0000000500)=0x10) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x10000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) dup2(r1, r2) accept4$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x80000) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000740)={@empty, r3}, 0x14) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file2\x00') 05:17:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffffe, 0x12) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x80000000, 0x12) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000040)) socket$isdn(0x22, 0x3, 0x26) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', r7}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', r9}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xffffffffffffff25, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x48}}, 0x0) 05:17:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) 05:17:30 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) sendmsg$sock(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x23, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x3f00, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @rand_addr=0x64010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x4, 0x0, 0x0, 0x400, 0xa17, 0x80204, r4}) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffc0}], 0x4000000000000d0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 280.939669][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 280.979676][ T9831] IPVS: ftp: loaded support on port[0] = 21 05:17:31 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xb) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'rdma'}]}, 0x6) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x400000000) [ 281.203811][ T7] tipc: TX() has been purged, node left! [ 281.226939][ T9861] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 281.236615][ T9861] ref_ctr decrement failed for inode: 0x3e91 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c672929a 05:17:31 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x2, 0x7}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, @can, 0x4, 0x0, 0x0, 0x0, 0xdf9, &(0x7f0000000040)='wg1\x00', 0x6, 0x115, 0x1}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) r1 = syz_open_dev$audion(&(0x7f00000058c0)='/dev/audio#\x00', 0x20, 0x200) recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000340)=@caif=@dgm, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000480)=""/28, 0x1c}], 0x3, &(0x7f00000000c0)=""/56, 0x38}, 0x10000) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x200005) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 281.251627][ T9861] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 281.262763][ T9861] ref_ctr decrement failed for inode: 0x3e91 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c672929a [ 281.274933][ T9878] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3562c144c5f0f285, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ptrace$getsig(0x4202, 0x0, 0x7ff, &(0x7f0000000240)) ftruncate(r3, 0x200004) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e22, @broadcast}}) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 281.398261][ T9849] overlayfs: filesystem on './file0' not supported as upperdir 05:17:31 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0) connect$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') write$nbd(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000700)=""/257, 0x101}], 0x3, 0x10000000dfc) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000340)={0x0, 0xda44, 0x3008}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {0x8, 0x6}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 05:17:31 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000de010004000000000600000037fcf085a84be00500000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040010000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="100000000000003d2000000000000000"], 0x54, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), 0x4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r0}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x1f, 0x9, 0x2, 0x0, r0}, &(0x7f0000000500)=0x10) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x10000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) dup2(r1, r2) accept4$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x80000) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000740)={@empty, r3}, 0x14) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file2\x00') [ 281.613716][ T28] audit: type=1800 audit(1592457451.852:21): pid=9904 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16020 res=0 [ 282.285820][ T9928] overlayfs: filesystem on './file0' not supported as upperdir [ 282.393332][ T28] audit: type=1800 audit(1592457452.632:22): pid=9904 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16020 res=0 05:17:34 executing program 4: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000e906", @ANYRES16=r1, @ANYBLOB="070000000000000000000b0000000c7221c2359c00010065746800"], 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4054) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @empty}, &(0x7f00000005c0)=0xc) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) write(r2, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fadvise64(r3, 0x0, 0x1, 0x0) fallocate(r2, 0x11, 0x0, 0x10000) ioctl$RTC_VL_CLR(r2, 0x7014) sendfile(r2, r3, 0x0, 0x11f08) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7903}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8000, 0x0, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000810) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x7f}, &(0x7f00000001c0)=0x8) 05:17:34 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0) connect$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') write$nbd(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000700)=""/257, 0x101}], 0x3, 0x10000000dfc) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000340)={0x0, 0xda44, 0x3008}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {0x8, 0x6}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 05:17:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000440)='exfat\x00', &(0x7f0000000480)='./file0\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f2, 0x1, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x20000045) get_robust_list(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000240)=""/111) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 05:17:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 05:17:34 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x16) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @remote, 0xfffffffe}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x4, 0x0, 0x9}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 05:17:35 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc040563d, &(0x7f0000000080)={0x7, 0xc}) [ 284.898303][ T9951] exfat: Bad value for 'umask' [ 284.918261][ T28] audit: type=1800 audit(1592457455.152:23): pid=9958 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 05:17:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x140c, 0x2, 0x60bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x110}, 0x24000180) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYRESOCT]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 285.254783][ T28] audit: type=1804 audit(1592457455.492:24): pid=9966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir841806465/syzkaller.q48xVW/45/file0" dev="sda1" ino=16002 res=1 05:17:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0x1, &(0x7f0000000240)="c5b3d668b383c1031e28e1324d7469639aa9299095d7f4025ddaa7c6226b2191254890550630ea60b178ac26479b14562c2bd19edb7dbd37b4b3927b06adaa2872668e35ccb50676c4e97a01a4f275c905f8d52a2759feaac0cee9b96f050c6df18faf47d76529c751e3cc2545af1885e9a6bc3b656f33e8e157ecfe606d459c93b8bd7485"}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000061101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@isdn, &(0x7f0000000040)=0x80, 0x80000) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000001c0)="2d4cb1e439eddbaaa9981def747e32d76800b26dd05aa13cb0142d2238a636522f0f97a2848eca0887531d3709196d9e51189a7a8f557ce534d9c9d00e6839ae395eb9ad7e4cf631d3f88c9a1573e9d721a37ce7502cc2e5d2425f2c7ba89853ec268c749432e5254a17659f58cebd8035ae2921ba4093a8c3", 0x79) 05:17:35 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x53cf) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0xffffffff}, 0x1c) listen(r1, 0x10001) setsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x430, 0xc0, 0x2d8, 0x0, 0x158, 0x218, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, &(0x7f0000000180), {[{{@ip={@broadcast, @multicast1, 0xff, 0x0, 'veth1_to_team\x00', 'team0\x00', {0xff}, {}, 0x6, 0x1, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3e894c5905a38781}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0xcd, 0x3}}}, {{@ip={@multicast1, @local, 0x0, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_team\x00', {}, {0xff}, 0x16, 0xf90fe344aadab922, 0x9c}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x77}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xff, 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x8, 0x1, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x7}, {0x1, 0x2}}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xffff00, 'veth0_to_team\x00', 'wg2\x00', {}, {0xff}, 0x89, 0x0, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x300, @loopback}], 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) creat(0x0, 0x0) [ 285.572965][ T9979] EXT4-fs (loop4): invalid inodes per group: 1627390080 [ 285.572965][ T9979] 05:17:35 executing program 5: io_setup(0x4, &(0x7f0000000000)) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000013c0)={0xa10000, 0x34, 0x7, r1, 0x0, &(0x7f0000001380)={0x10360, 0x9, [], @ptr=0x8}}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001540)='/dev/sequencer2\x00', 0x4080, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001600)={&(0x7f00000015c0)=':\xa6^\x00'}, 0x10) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x5000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x400086) io_submit(0x0, 0x7, &(0x7f0000001840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x401, 0xffffffffffffffff, &(0x7f0000000040)="fcf5d212b37cfa77e890d621b5635e9d90535faeb7f0152ecf5df88d0e7a12f7636b7fa2e324de607eddfc01a70c2776f4600689cef5fb8982dd36423c8458a6ef3ff1bf88721cdd6ca5302d1832bc61418fb593f8a2d1117238f75ac740cb43dc09e5bfbe494b5baefc6c29388f2976210284516995cbd3943bb8b4b4f04819e8e35742abc6acddbcd6367012bed0a865cd356f64eb1520e6e897e06c", 0x9d, 0x5, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x1868, 0xffffffffffffffff, &(0x7f0000000140)="29f5793d7db16246a9238a2764c98c37da74a499ddb831d1c546484e700759f2f14fbfa55c4a0b63ccad694dc039a946f3185ff3c45e1df8bfa0d772645cb16f49f3344196a4ac22c9c5962c66c62ddc2f3afd7806a21aed9ff77b6e4c3d79933bf5dde2054ef58d7c02131243", 0x6d, 0xfffffffffffffffa, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f0000000240)="173d4a1eee2feb7e0ab6c0c295d2ef2ca6859efe24c7833e1287f60ceb86ddb913ac0e6288725338f0682ecd89be0bc4d440cf65f5049043d0f89fbb5bb28630706d0f41509745ac7497d2ec7e491560ecdeed18e9afda0b10bb06e8fdbea5d5a52b305421b2827b262fd930cab706677c265509f3c0349c303a96b65be15e60d45c29d6f32b190badbde09dcbe55cc592462a2862e22e2158bf1bea9c167db9fcc600d8d9400cfa3c6db93e1f52e30f1ba19f444d7ad57933c1e468d6eb4fab4060cecdc00a578ddf70d89e732e598c93563d79346a9a32", 0xd8, 0x7, 0x0, 0x2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x4, 0x0, 0x2, r2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x8001, r3, &(0x7f0000001440)="c23a5881ffbcfc71fc097b262a0f85d36f72d3832305410138c2fb7d5209f5dfd3a27d5f684b7564b6fd072fcd99a7abacfe14569767bbd41e7afb4afb05315756b44b7d07af958b8b057f91145f2aa0bc557ff74e3dc7313681005d5fa48fd38f31a8e77f6e62258fe1d9c6ec9b5232cdddf63a6e0294e50b1ed9db8a9d91e062404784bf800e963f5315597e1c995a6afb41f2a41bf7797b48ca4e032f9005c4b18b143e42fd3d4fb49c1594484dd65964a601c2db50426c72089bd7673360259beb868115ce62e5ee93bfd39a8327d7d81b4ecbf4ada13454394a73fc9561a02e379b75f2d1bc69e0", 0xea, 0x9, 0x0, 0x1, r4}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x401, r5, &(0x7f0000001640)="05ea9ee6e411343fa1727f6683141ce180d485aaadbde9dbb4ef7c7a8bec8b988ebdb5c68118c7f63a373940d5801d59584daf12fc1576cbb7f3ad112baaeb547ab81d738781", 0x46, 0x0, 0x0, 0x0, r6}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x7ff, r7, &(0x7f0000001740)="55fe5d83fba2712c39e3cc4160886ed66f0d225fdf44ef51c3c3fc1804168ed9c84ee231199d14903f04cad9534e6b58c392987db2a071ff222b44dafefdbaf45f3a0170b4f37400e2ccb155f97727d6dc5461ec48d3190e72fe38d6fb083033afd2646d700dbbdb03e09995d0f5c5491e0773e4576d9d8bb1dc02f3a1724aec7e3763403920bd5305817adadcae3bee53", 0x91, 0x8, 0x0, 0x2, r8}]) io_setup(0x20, &(0x7f00000001c0)=0x0) io_destroy(r9) io_destroy(r9) [ 285.688230][ T9985] EXT4-fs (loop4): invalid inodes per group: 1627390080 [ 285.688230][ T9985] 05:17:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0xffffffffffffff99) r4 = socket(0x5483c275b67aa642, 0x6, 0x7) accept4$x25(r4, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) lseek(r0, 0x0, 0x3) 05:17:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getrandom(&(0x7f0000000140)=""/147, 0x93, 0x3) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x7, 0x8, &(0x7f0000000040)=0xff}) 05:17:36 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xc0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$video(0x0, 0x40000003, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c296f7765726469723d2e2f66696c65222ae353f9302c776f726b645b723d2e2f66696c65315c00"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 286.414512][ T9974] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.443392][ T28] audit: type=1800 audit(1592457456.682:25): pid=9997 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16042 res=0 05:17:36 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x15490, 0x0, 0x0, 0x0, 0xfc9, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[&(0x7f0000000100)="6e4c9d938cfc2e42ae869b639a4de5559dcc730ac724f2996fb99e1d27e51c9f5c15bdd7f00036c43c142ad27a5e84"], 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 05:17:36 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$pppl2tp(0x18, 0x1, 0x1) chdir(&(0x7f0000000080)='./file0\x00') ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x200) openat$cgroup_subtree(r2, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x0, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x9, 0x80000001}, &(0x7f0000000680)=0x10) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000140)=0x3f) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000006c0)={'veth1_to_team\x00', 0x1000}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000040)={0x3, 0x2, 0xb, 0x18, 0x80e6, &(0x7f0000000700)}) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000280)=0x80000001) [ 286.599241][T10009] overlayfs: missing 'lowerdir' [ 286.646130][T10010] overlayfs: unrecognized mount option "l)owerdir=./file"*ãSù0" or missing value [ 286.723180][T10016] overlayfs: unrecognized mount option "l)owerdir=./file"*ãSù0" or missing value [ 287.184132][T10009] overlayfs: missing 'lowerdir' [ 287.842273][ T9952] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 287.858063][ T9952] ref_ctr decrement failed for inode: 0x3ea9 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000080279d7e [ 287.906113][ T9952] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 287.923640][ T9952] ref_ctr decrement failed for inode: 0x3ea9 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000080279d7e [ 288.296289][ T9974] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:38 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x200180, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x6) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000100)="d7b426044d2c38bb51fae27c8a5c1851d4d66ed84bf62ba3b36ed4911f3652ba03ce298fbe30e5991b6161066f98f5a7b6c5f799be3999fc475ddd51b4e2176588b5bb95587e09247473230d185c28bf7ec1e1440926b06a04ec3df3e77ba9f90f08e58b19c26ec0f18900", 0x6b, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f0000000180)="4dbd87c513f457ba99da4bcc81f92778b157ef16809df4f9d41b92aad67a6e4848d4e85a9418124b337c33b404ae", 0x2e) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4) ioctl$RTC_UIE_OFF(r2, 0x7004) 05:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="78020000000000000600000000003c1d500000f25440660bf7437039f6dfcf9fb3a0f53cb94b09000000e193ff3da7cbc078e8741d445c125f330ee2"], 0x78}, 0x8081) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x1, 0x81, 0xffff, 0x3, 0x9, 0x115]}, &(0x7f0000000040)=0x10) socket(0x0, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) [ 288.465120][T10052] Option ' \(¿~ÁáD &°jì' to dns_resolver key: bad/missing value [ 288.520049][T10052] Option ' \(¿~ÁáD &°jì' to dns_resolver key: bad/missing value 05:17:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x140c, 0x2, 0x60bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x110}, 0x24000180) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYRESOCT]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 288.919185][T10058] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 288.927741][T10058] ref_ctr decrement failed for inode: 0x3eb2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e060562a [ 288.942123][T10058] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 288.950969][T10058] ref_ctr decrement failed for inode: 0x3eb2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e060562a 05:17:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc268694aeb0743e32dc819b6cf5c8ac86f8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:17:39 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:39 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x3, 0x6}, 0x0) io_uring_setup(0x672, &(0x7f0000002b00)={0x0, 0x0, 0xa, 0x3, 0x137}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x1) unshare(0x40000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x10000, 0x8, &(0x7f0000001840)=[{&(0x7f00000003c0)="7dea3ca77ba3703a72ea534c8f41bec7ee749f23a6e9141647b0db5688e8c08ba49529118140cd824a59f1eb7990f34f2aad1646b84661794d62a5e76deaf5f6ac9445c6b691b1b94531115edfbf532f78d1076debdc5e6761dcf1bc89e0ddb26db75ee70c8fd053457f1c20d689c1ed8e1311f1993470cd494e0d16b07fea759341221c1849d12e2a65fca2637bf0160457ffbf6da955286bc34c3ce8b107fc7a19886bf9d59dc52c2b321018475f1e6a479f691d282c9095a8a7d52e1c2567ae12e4c1ce2a9cd1da7c5e916446e8e5bcaf8fa21dd68a2cf56d050631d0de8ba41d3faee909cd7dcd59b87da87ade721a567014", 0xf4}, {&(0x7f00000004c0)="b971229666ea65a12f4e6c754c67b32dcaf0146bf5569b8f11d46180b14ffb6d090a6947b8fd5ed52f019eb7047afb92350eddb9f72357fdf0bee3975f3b772feb8e8a585dbf058b94bbd1ed4e09c8", 0x4f, 0xffffffff}, {&(0x7f0000000540)="11fd6645323a8844b31133bd9a707ca86768cc2383bf6a26649d72b144476174583c42c38efdb0783cabe69fb5905cd58f2e6be46084df631de724368a1d146aa09a15133878904f983218d5f98f954e690e0e9b9cb569da8b48ed3446e18e723b8039864fa19f75dd573c7f1cba5d07eee0edeca2aa00be34def58a78a6a38da2aabd4d974311a06215f038da1e448ee9beb6359e3f509f33afe489083ce4b4aad93e658022a5002ed7b5378697b0015b", 0xb1, 0x8}, {&(0x7f0000000600)="6216d31c40f157779e7d17c1a4872873875ce6f4df3a2b56d1616ea8c8155cfcd0915752b74ba5c10a66ab0705d9b967fe0106e01defea19721e7ce57f694081f699b28cbfaa44a6c0f48882865cd1092b1e5a3b65ab0997224b6f50987fcac9027b00a85cbd1765bc7eaf7cffda4853e7f04208da56c8a142da879bb57977406b8bd693b6fb49a337097bcd8a47f2c9581393b97c51d3a51b5adf4724965850a2c8aaeadd677a71acd06fea8c593f49b83eb5a5922eed1e428fc5b9a370782937cae64f", 0xc4, 0x9}, {&(0x7f0000000780)="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", 0x1000, 0x6}, {&(0x7f0000000180)="11db", 0x2, 0x100000001}, {&(0x7f0000001780)="98e6d4f3429070c8943d9569941d44985c8c0f883513cc16a0e15cd251d26b8672c7b4e7213e9efe79f842861585abe587bb7ec184e3913778fbff46055d61822b12589a82c44ddf95bd641ae308d4b91080df3cc39ddd87db2dcbe47d6173eacff1d473825fdda8d55430502ec1defe5ee17be94280f041be6a6133de5977d704a71c80aa8ed6a31a4fa73de1c5df81da7480b578", 0x95, 0x1ff}, {&(0x7f0000000240)="8114deb820", 0x5, 0x1}], 0x2a000, &(0x7f0000001900)='/dev/dlm-monitor\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x42402, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000001940)={0x18, 0x0, {0x0, @local, 'geneve1\x00'}}) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb030718853bd3b6ec048fb63298263fdb3ca47b8c") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') 05:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b845bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcfe83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff7d52f43901c2b9f7"], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x2c040015) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) 05:17:39 executing program 0: r0 = socket$kcm(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) bind$phonet(r6, &(0x7f0000000140)={0x23, 0x5, 0xff, 0x1}, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x4}, 0x80, 0x0}, 0x20008041) [ 289.194893][T10082] No such timeout policy "" [ 289.207838][T10082] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000300)={'nat\x00', 0x0, 0x3, 0x99, [], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/153}, &(0x7f0000000080)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x48eb20facc865e2a, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180007041dfffd946f610529802000001f0400050000080008000f0002000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x76, &(0x7f0000000140)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r6, 0x2e4, 0x0, 0x5, 0x3, 0xffff}, 0x14) [ 289.326180][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.345480][T10082] No such timeout policy "" 05:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x2c040015) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) 05:17:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 289.533519][T10102] No such timeout policy "" [ 290.046099][T10093] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:40 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 290.098780][T10102] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 290.110291][T10107] syz-executor.0 (10107) used greatest stack depth: 22464 bytes left [ 290.117511][T10106] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 290.137511][T10106] ref_ctr decrement failed for inode: 0x3ebd offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009b87cbba 05:17:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_setup(0xa, &(0x7f0000000080)=0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="e0", 0x1}]) [ 290.185297][T10106] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 290.203777][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.220520][T10106] ref_ctr decrement failed for inode: 0x3ebd offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009b87cbba 05:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x2c040015) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) [ 290.435431][T10127] No such timeout policy "" [ 290.442794][T10128] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 290.890139][T10121] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 290.899147][T10121] ref_ctr decrement failed for inode: 0x3eab offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004616f223 [ 290.922143][T10121] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 290.941796][T10121] ref_ctr decrement failed for inode: 0x3eab offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004616f223 [ 291.019178][T10080] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.082032][T10076] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 291.107516][T10076] ref_ctr decrement failed for inode: 0x3eb8 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000353aa2b0 [ 291.128163][T10076] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 291.137518][T10076] ref_ctr decrement failed for inode: 0x3eb8 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000353aa2b0 05:17:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:17:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b845bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcfe83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074700000000000000000000003000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff7d52f43901c2b9f7"], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x2c040015) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) 05:17:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:41 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)="aade6813a70730f57d0431d0ec7bbb6d2e96cc0589f11ecf0f0681c7a6eced7ed6590adbcf7cbfede8f0d45f6f9d9f1a4e6d927eb674ec6bd5ead14861afb261bf9d5ca9ff62027dd029dabd82a93f9a12aca587a977c3cdbd599200f3bc6f828c07f1df03ff59bfd027268c5a77307c0b34062d0aab96f6e75f95c1bd25c5482398d93afc819df40f0b1234b62ba03bc530828a", 0x94}, {&(0x7f0000000440)="7e67a8ac990d31405f313894a6920e248279cd1fc46baa0226751e5bee4a2f226293957b6c95a41775766513954fc3341227509c7a4be035859545", 0x3b}, {&(0x7f0000000600)="65d4", 0x2}, {&(0x7f0000000640)="4d973aee6eb6bf45d7ef9166da284cf4b40ccc7e7b6714a1a1aa000a291d36e40e5357401a180454ef331e", 0x2b}, {&(0x7f0000000680)="70648c95b0b0122f5d0470f9d84b34d6d3d48ce621b518c7860db058118d8688be099580a93bd14a324369b35197726aafd51920b638ece921e03f7a16cef5e3085a62e42ef71781cfb7cdd11ec97561ad48f523a2f20b3ee67884ddab4b349387ea3b3295654c470c5e767c39d629c2024d165c3696e63db700ad3783256fe0822048d326055b3d5a", 0x89}, {&(0x7f0000000740)="1213a5e025fad7767572c16a3a2d43ba831ae46d5c1670332f56b055cedc979ea55d5282037f9d8f8a7945", 0x2b}, {&(0x7f0000000780)="81b5e77ec38fc259adc5b2e5eb1684f15dc946393a208b2ba7cc1419c8809cb57252d25599c8daddb4f849a652f16461c65978d460ff29931811085a9652", 0x3e}], 0x7, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x150, 0x40}], 0x1, 0x20000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x128, 0x0, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth0_to_bond\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x20000003, 0x7}}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0x14}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000180)=[r4]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001500)={{0x1, 0xee00, 0x0, r2, r4, 0x20, 0x101}, 0xffffffff, 0x2, 0x5, 0x5, r5, r6, 0x1}) 05:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "8929089a146026c600b682295626da5a58da0e"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/212, 0x1201000, 0x1000, 0x5, 0x3}, 0x20) read(r0, 0x0, 0x3a) 05:17:41 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 291.421913][T10153] No such timeout policy "" 05:17:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x60, 0xd, 0x8, 0xcbc, 0x1000, 0x9, &(0x7f0000000180)="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"}) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x1200, 0x7fff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000001180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 05:17:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000300)=0x8, 0xffffffe1) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/108) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8098}, 0x4041) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="21bca274769e620a2d34fa0095e0612687ec30310d4e02a90200000500000000000000b579a782c270146d0e0206e700a8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='grp\t\x00\x00\x00ta=']) [ 291.494966][T10153] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "8929089a146026c600b682295626da5a58da0e"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/212, 0x1201000, 0x1000, 0x5, 0x3}, 0x20) read(r0, 0x0, 0x3a) 05:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "8929089a146026c600b682295626da5a58da0e"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/212, 0x1201000, 0x1000, 0x5, 0x3}, 0x20) read(r0, 0x0, 0x3a) [ 291.727920][T10173] EXT4-fs (loop1): Unrecognized mount option "grp " or missing value 05:17:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "8929089a146026c600b682295626da5a58da0e"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/212, 0x1201000, 0x1000, 0x5, 0x3}, 0x20) read(r0, 0x0, 0x3a) 05:17:42 executing program 4: mlockall(0x2) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000002c0)="8411ac9e95b2a6801dfcf6d8fe5dabe0046e2168c0e68c05000000b66283f66571e754ec3ed52dad078b6adac167dc99d2697c4fbc4480e692f8b22b74a7cace5fdd84584a68d514000001009c5052012d", 0x51}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x986100, 0x0, 0x0, 0x0, &(0x7f0000000000)="d35f7e253a1cf05c100000000020f60ab6") 05:17:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x58}, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=""/130, 0x82}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10000, 0x10001, 0x0, 0x9, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 05:17:42 executing program 5: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f00000003c0)='127.0.0.1\x00', 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESOCT]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@remote={[], 0x2}, 0x6, 'veth0_to_hsr\x00'}) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d0000000100000001726b7469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0xc010) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) open(&(0x7f0000000040)='./file0/file0\x00', 0x20101, 0x62) [ 292.384506][T10193] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 292.418050][T10173] EXT4-fs (loop1): Unrecognized mount option "grp " or missing value [ 292.450440][T10193] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 292.753532][T10152] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 292.772672][T10152] ref_ctr decrement failed for inode: 0x3ebb offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cd17e866 [ 292.785881][T10152] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 292.795327][T10152] ref_ctr decrement failed for inode: 0x3ebb offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cd17e866 [ 292.901351][T10151] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 292.909521][T10151] ref_ctr decrement failed for inode: 0x3eba offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f6d881d9 [ 292.937279][T10151] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 292.948161][T10151] ref_ctr decrement failed for inode: 0x3eba offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f6d881d9 05:17:43 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:43 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaaaaaaaaaaaa008864450000280000000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) socketpair(0x1, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@setneightbl={0x14, 0x43, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa}}, 0x14}}, 0x0) 05:17:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "8929089a146026c600b682295626da5a58da0e"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/212, 0x1201000, 0x1000, 0x5, 0x3}, 0x20) 05:17:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000400)={[{@i_version='i_version'}]}) 05:17:43 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000180)={0xafe, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0192070000fffffffffffffa00009f14200100"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000070053ef", 0x4db, 0x400}], 0x4810, 0x0) 05:17:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000010000507150000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, 0x4, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x25a}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5c0110ca}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@resuid={'resuid'}}]}) 05:17:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "8929089a146026c600b682295626da5a58da0e"}) [ 293.228248][T10223] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x33) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @broadcast}, {0x1, @random="f9a0b91d5bc2"}, 0x26, {0x2, 0x4e22, @remote}, 'nr0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x60000011}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x200034, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) r7 = dup3(r6, r3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x400086) ioctl$TIOCGICOUNT(r8, 0x545d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f00000001c0)={0x2009}) 05:17:43 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) [ 293.308048][T10229] EXT4-fs (loop1): Invalid log block size: 65 [ 293.334618][T10225] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.352907][T10225] EXT4-fs (loop5): filesystem is read-only [ 293.393901][T10225] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 05:17:43 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x76, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x87, 0x8, 0x2, 0x0, 0x3, 0x10488, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f0000000240), 0x8}, 0x8040, 0xffff, 0x0, 0x1, 0x6, 0x8, 0x3}, r2, 0xc, r1, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000340)=""/151) ptrace$cont(0x7, r3, 0xfffffffffffffffe, 0x3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xfc, 0x5, 0xcc, 0xfb, 0x0, 0x2, 0x814, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x61, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x10001, 0x4, 0x9, 0x1, 0x8c, 0x5, 0xff}, r3, 0x4, r4, 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="4064a59ba316c5d1a21ad049babb00e69d800000d4e794b0141e859e8359b14cfa7ec0a02005000000000000002a35b2a3bb0202d04ec224d05bed463b52371a13167ed1fe33bad961339576f0ade116e70f91fba988b9720006afc3c38f75fad398b987f77e0ca35943e223ade1", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fbdbdf251b00000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') [ 293.472850][T10225] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 05:17:43 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) [ 293.539418][T10225] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 293.593514][T10225] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24389!=0) [ 293.665259][T10225] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 293.881699][T10218] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 293.892436][T10218] ref_ctr decrement failed for inode: 0x3e3a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007dff32b3 [ 293.925714][T10218] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 293.944120][T10218] ref_ctr decrement failed for inode: 0x3e3a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007dff32b3 [ 294.073180][T10216] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 294.096045][T10216] ref_ctr decrement failed for inode: 0x3ecc offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000045df2243 05:17:44 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f00006ac000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r0, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f00000003c0)) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x8c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "8a2283"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a04843fc68"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ada0fcd6e756a99e2624c73c5"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x14, 0x4, "40fedc516723000090db23480c2446cc"}, @NL80211_KEY_SEQ={0x7, 0x4, "35f886"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40080) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x32d02, 0x0) write$cgroup_int(r5, &(0x7f0000000300)=0x800, 0x12) 05:17:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYBLOB="070f60"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:17:44 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) [ 294.117650][T10216] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 294.152901][T10216] ref_ctr decrement failed for inode: 0x3ecc offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000045df2243 05:17:44 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x101000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x80000002, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lazytime='lazytime'}], [{@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x677f7b31}}, {@fsname={'fsname'}}, {@audit='audit'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) 05:17:44 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) [ 294.468191][T10271] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 294.487968][T10271] ref_ctr decrement failed for inode: 0x3ecd offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000ce654f29 [ 294.507783][T10271] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 05:17:44 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 294.539376][T10271] ref_ctr decrement failed for inode: 0x3ecd offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000ce654f29 05:17:45 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 294.697446][T10281] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 294.720391][T10281] ref_ctr decrement failed for inode: 0x3ecf offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000005fe02ce4 [ 294.789371][T10281] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 294.826067][T10281] ref_ctr decrement failed for inode: 0x3ecf offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000005fe02ce4 05:17:45 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x10b082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = socket$inet6(0xa, 0x800000000000802, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r4, 0x2, 0xffffffff, 0x25dfdc01, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bcb1d41e44f96f6797308ed8a3dc9eb4123a903d58a102dd1eca653150422bc91e9585fb386e12b780f83bc3e9f04cfe992ede09a479780e248737659294d9381bc2ed35f7f654135a95ffcb63b5fb7223a6099776903d053a8caf5b8d3f597903b7de9e6bb9b9a429133022c44270ed079a94e56bd7e8459d106f1dcd957c83a3cfcbfd92255276e5f5cc5f4e", 0xbf}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000000200)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 05:17:45 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x10b082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:45 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000001080)=0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0xd0, 0xd0, 0xd0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffffff, 'geneve0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(0x0, 0x0, &(0x7f0000000440)="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", 0xc16, 0xfffffffffffffff9) 05:17:46 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:46 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x10b082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:46 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:46 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:46 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x10b082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:46 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:46 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) 05:17:46 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) 05:17:47 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) 05:17:47 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:17:47 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:47 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 297.800222][T10331] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 297.826981][T10331] ref_ctr decrement failed for inode: 0x3eca offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009f8f63aa [ 297.858286][T10331] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 297.893182][T10331] ref_ctr decrement failed for inode: 0x3eca offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009f8f63aa [ 298.068990][T10326] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 298.233962][T10326] ref_ctr decrement failed for inode: 0x3ec9 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008c000e52 [ 298.273038][T10326] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 298.355192][T10326] ref_ctr decrement failed for inode: 0x3ec9 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008c000e52 05:17:48 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:48 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:17:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:48 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 05:17:48 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x187) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f667f6c653020"], 0x194) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x3a000000000000, 0x4, 0x40, &(0x7f0000ffb000/0x3000)=nil, 0x4}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) flock(0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000580)={{0x3, 0x0, 0x80, {0x4003, 0x6000, 0x2}}, "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", "a0947bb3e28f7acc6061269bd4e2fd8a8b7f14f713c0fc2cd4d23a63b6bcf718617656f34cbc80cf47692e23e79ddef3bdd3edf56132513e28538303dbecc9d5cbddd81492491906f53e308916f0db24875d153225d0076c3ea4e8cb42e4d3e4b869e4e69009a938d88451290f54043a0830f8fd21311a3065f337b4b81d66ba524bdd79487e5e89d39c51ad71b25385bc6f8f19bda30e1b6db30d564fad9ea33e14285844fbf9487a7bcc4eb1fe621c059a1c9b47dd53ef032a173376574b982d205c11dac7531bce47921d4a2df5658f6f19a3beaad11e27e0e76b6a5b4fa9d51dbf22c4b84e7928678143102bb0dd9eef9b7469731bd24e5994fbbf3f58a275eb81dd31bc9e2ecfacfd7d8342dffb3b4a33cea39b9dc39e8e5accc448e07396f1a819f7973f4320dfc0cf92344d9d17972ed279ea366625e5f35aca2fd5b2951fc09a90a24822c3f496b964fba75aac7541a23d1b3e33609a89186d7df297da53910e2afd0b4d2b0ae4852daaf0fc985f479e2c62fed26be1e88d6b2e62c77da0b1303133b1d150f466dc7a9a1329da9eab9f4ae31a82378dac03448fc67bfad528de80dc7fa5d449fd3d8aa2271d8e36ad699ae9479e9a4767eb6e21ae693a0b30f5e8dcb8dc05d5bc63677c0650aee3acef8bbc236e97f8fbf2d24ef5a5b37d36a023d0d78ad087a4a58c27a7578d4ccc0ec899fb8befb5bb89fa1c293c8c3843435a36a773b3372e8da5713564554e014af46f0a2f7d14256a8f97c4edfa8ccb4e0a87ecb73a32a36484ae3700d34a3dae40058cd3056663912145e440dce61d013bf2f1c4d46341d51f7e5544cbb9af43a88fa2feb28c3447befbed47ee28292332b7e79f9487365efb6b077d17ee4ba4cf2729e020656d9b4124c35273ef53935aac31453b9a04cf2b4922209b6a9513628272da24d4f842c94370df07b2b33ee964ea10c16817c2f320b34dd810074eae8748bd4abc1540225d86e087731d3e7343211f23ec717740735bb69a32095226020c1dcf3c8a7481cd36589b8c5df56de945f70be8a56ca426d3b2154396f34332ec443edddef3522bcae56cb5a5110ac1e27507bb046c885c392fd7a9d48a21ad25aa9ecb6aa5e4f10a6385b260db12488bd9770f32709885fd535d132f89f9dca51397219e0ebfd4570c1d936c02678e7fb53b87aa73bdd223822f775b867556c5401e685e00157821cb304c96e1ff46be71abb00ab88a9ef7289122f7ccbed07a862def53faa7dbdf9e6ebf08423c0e6a4abfe03400cf8fc2dbeaa2c1cd7e9113562a2ef4cfff01fbb83f5b0526b5aaa435cebb8d5c3d709e1c554854f05a28974aaa4b80843fe6b78ea16a1f324bbad574c72f4142eb13591f40ce1149a071168d010c7adca6a33bd9564c623a85d8d45d123619040e94f710f6472ba7d9886c7d85b7eceafb6ba1ce883d2117d0c2d7c08e3b1b68957a49591c191f3ffa52607dbc6fa7738e36c6733b089fbd66da8a2a805a2ed121ea41b94631a1eb9836b623d2720205be8e2bb1d193b4525ad067769a3bc62b36672be559eaa2359c621a6e6bf610a48fe70eb0bb73bbb5bc1dca79774cf604714add761a32968a510a763b86d01a9a4f4e8bf1b45c710154ab87b4b9d153d8a9dfdcb3e8ac6e4848c9e270b122725546b3cf9ec207a3fcbf7055e8b96b04144e5545c672ef9eadb558a956c102034c582bb78d457e6c87a842c72cd1e1a97bf04763ce7ced0fee59749af5d935ca8367ae65cd0f93626cf6d1b7522805dca525c9c3d644eb5fc5bcf7b2f9310b78e3477f74ffc3aa86150cc3982de69c79e00aafb97adf908cd09e1880227ca37c3dc61c5bd0cc395793831c7184692ee6e7e6e9ec61a5445ac6c073f759670bceaf9f5743dd45a3270ed5de2dc10c78dea72c924040f46887f7844615a553792f1956004d979afffbacf67ed821296f639901c917e6598ffddd63e2c86844e2f1dbf57cad62287a0ea9d3dce3ed4bb840b3204da2e805e3e66addfabe1fd657e013ac01ecfa4654aed5d7c77e1ef75b9530276936ff161e8e195385b07351186c198d6f20761209d09df473c95406cbba8dea4f5349b03c4a2a5722c8f51c25dc5157cfe5d28d852f4cfdc4bf59d60e369a12298a506fd060e0fe0a27e1811dd5dba62182023149111470612c81b4bf68b654e69cc948189ae03da40e43786621b9c6c13d5be5fec2d78a748c4851bde667501f3c9c9fde82f7059aaa7290e30a8c8a21c343ae087fdf9e94d00a8f810fdd4497683924714b0097425cb379f862da13cd61c97e157f57ba5c06a3e16ee1c594a05a69b1ba3ff6fe57fb9491d1e2f1cfc83c52eef84c63b7ed0c48c373b413c63635f494c966a6df8900b55f4ebdff414bfe737cb935403b4470595b9d82167ad7e645e4e8894a38f135ea1507002517361af173d1d34a361dfe28c0471dde646ae63aa9a99322a76baf502521650adc764107a6213e9ed5ded781c770fd85313483cd7ffccd7715df34707c48647d4ee2c74d5713cd205053f2e14d85322430ece8f4f1cff7c76d19b8ee84b70bc0e10b73e147b49f422305d1df2422e211012a90ba49f5ed1c4c2469667d1c404d16b6ec4b30014b79c9bcecd2786c8930564ef7072e0dcd3cd6518d02160864575db9962ce4ab8657c3306f424ff3d86c8acd4840590ae51e6f3b7e83475daca7e2f07126a2094dc31370db65c377b8c9dbbc2ae29748be0cd7af4773539223536b09137a98bbd83c850d4b0c2d3ef5e991828cf2db03b1ba8750eac3d28bb7d917c76f8145e09480c910135f5a78a002ee2e1d738070ae372cfe86430ab223125a12cc0fb5b75267fe8a59fb0865d486577e5f46ea8c8c1b9894feaed9a783aa861d2ec9222dd2a53e94fe2bcb11798ce784e2de6be52c21a601c744fab99fbf935163fbfdc26dec3b366dbfb93f45f6103555231d92def665ebfbed0501743ae1e6fc1e3f7841eae10c7e3f75b4b65277a0065c1c90e24983f09e6def4e473052d850285140223d9d03d341c17ebfb83df982df447e8cc4fcd173e8a870ac9f2dc7282e3f1ce27092fc83d0402dc5fdc71f8c10052501525dbde26b48ce0443ea9effd8ea16275da1a7bad7f4636f68ebd44338ece3bb707ee1c0c4058f1808b7f34b0b085b5a6c178df4cc32b4504b7a7130213b84d793d7c5a5a4303c6970ca2b810b6bcdd46625394749b6bec5e9498f0660d91b5e32f0fe40b849c66416d156f2dbff20cdc76009ee594b5cbefd816c6313b1ac780b96747e1333cc3791c2017555af3f30623fa429878c17970429798b0ca491e41457eb8793e01f49216d523cfb445b30b4d53d6dc25d0286a56e64b47b1a0df056ca157cfa88d93104353fed5e6feab1329d75d2ecf32172781c3acd42f848078f5756f157f9cd3fa1c4b1daca93e4c1afc9cdb1980b8b82adc9be8172232c382e95fb6301ec817bdbb4b46bbc12509eca0f49905bd8d2fe5a91e2a52ee5b852feaf2ea9d0df59bacd21820027e4723b7fa0ee2310b7ddfca3d50033a415ee79caa795103c2ade5c333beb98d22a8847ea04b32a681ce906442cf50d18542adaab156cad9adbd91230f25c0a9e1cb258e33f3c0b6ef73fb0f6985e49cedeb1db54184bccc1e50236d5c5f1eda8f3462d421baad3d88bd4ce25c0df74f6c55e765d61c5e7333aaf2af216f68940c4f7f8e39fb0e68ff8b5a5a1a0cc982788d177c949d4ec4769e1ac0dc29d2dd7a9ecb22feac841480c02651989171d58439b0b573364b9cca593e105c98035cb05653543c6c515ab963fc450d619d4f85c72db279bc4bab6997fc66494c5dcc1ea6516193b133bd8b5a2d3f27bbb10884df49a21baadb77fa920025033e20bf66e08f6f00282706a4f9f11f8c6a46145a57037385114d7cc80647c2a6afe2e73c0f85e0bc62a65516aefdc2352c8fc9ef82bdba4a7e61f7337202cf1e22ccdf72f7b877b52cf43a2fe4b41fd043595f682d722d6c5000110fe104767eae3695229391df2e20c17ff76354eb047f512292ccada0507c14f0415f544995041ebe0c499c49b96a80f9ef1ff9873821d56625c2229e9e2e06930565dcb77f892a898485598d8d2382d37a328df2e7925b0df8322f749a369db75144393271aff6ccc9774fe4afc5cec45e43d970a7f558dda5cea7a8d2e4d58f6cbe06131a2131519548d26b065098718b9202434c84941f6cedbbbe02fb70ec4b1e7a7093169197f72fe2738978d99aba11b981f8b0024033f76974d47f3d96a388e40d6a9a16ef4296720000502ace258031246e8ec70529ff927f3062a2b52d2e5ca90d7be840eef96f5eaee3742f745357bbed3885ab3b0827a36aafc9f23fbb818627f045c7969be57c2c5e810b8eefab31d681d887f40a203c488f34841ded2698a9be0c83db273b4deb8312a6bed1b39718e5e5a3f0a9e44d9084443eb77042f8ad08cbc7214b4066926ed4e606f065464d64161874923a9b0239ff9123ad9fda42067cea426b16413f477426749e36953078ff5322b0ed15f10e39026f40e2fad00089651d155ce193e14dd50ac718102fe3b3b9deacc5770845150f0fa662de7d1f620ebe3800aa6a871001ac6170031204ec25d1b7e565b9c505a3f3e8221629fc0cb2a6974b95d125c9f6faafcdf17f07d99cb66048fbbc5c0b946611e67a60bc4ad5bb7b51362074102e1f5a6d8464be846d20389b7b098a6b7eb174786aea0de7fc9bba6737cb81a66efc20db0df07e04a02eaa0f6a8d69cb5911d6b241d1c979048779fadc9efed44b330baf5bc52977ec0688d185cc5d7a4618c1a0c1c9d5c5589bb921997a94ce64137b90134c065833e4a368bcb6a27fd4c71b76e3e4740938ac067158bbd3b9f6f48888a459a3390fa6e00b66cd5437b575c8e7cb994f36fb9cbefaa68071f8282258d82b1ca576af373fb3fb0f9a74533ae78e97a95a6d383f382a42aa8b289f419d995a70d82d6a40edbcaae1084e6145d593f1b308c1b5ad119c952b789963e7dd58da1b82c9a2814e302e7ab6a536a4f0b2d812b0697ee598db5f4c54cd8726685532ff04dbb7c37739543191506b4c89caf0aaf6568b8d12ac24e3d31515907b06611afc5e2be3f53f3ba7092859e7d03e45a8076d5736a0aa1fbaa837e0d942fb10c0a8de930429f92b3f41a401798fb4bcd7ad7a66d565e77079307cfe99708d8e0a4f80f050b35c8c493496fe2fa501c80391ddfedfda1f951b47be0ec4624d5d65ccfbfd42cc32c9d7e057c7d41b21326256370426e23df6e9effaf697395000b17ee327a5810c9b2ad4b0af9865517523e86ca7fa87965659e4808b53903dcbfbbf62d1da79c33c8caa1c5c3cd167eb50fdb26fc5573eebe2652eb30f8c6ac46aa25bf4668a379d93648af8b4dac838ea94e7e6c7de2fc40fc88bbffdcd10d2bbc66a381bab0fd3a45153dd2d8946d252610399efd411a3eb4192fcccbc9ced05972c2833727855e9f987190dc291206d27bef4b33f9b106160f022f9b5d1bd4d81a413b78f9c666bc63c9e02bfcd6bdd1b8e9a1e555019af5f6fb35bd714196b6c0a9a9f70e0e0fad4bf3e6311eb778bf23c1cbac7eb281defa3832f0aa2f2361831fca8df44ad0ed690cfd576b42f26ded183773d98d1b8bc3b9ad38376e65bda423d9d08780a44642613c8480b29d676d78ed0c72a772fe938c41b2878ad8b8c2c514b53345cf8c9c94796ca74123ff4f80ed84bc28f00469110e4c585c18e9a0d695fd0bdfc302a2aa48be748041391adf8a"}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 05:17:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:48 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 05:17:49 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 05:17:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:49 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 05:17:49 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 299.157587][T10372] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 299.168297][T10399] FAULT_INJECTION: forcing a failure. [ 299.168297][T10399] name failslab, interval 1, probability 0, space 0, times 1 [ 299.182224][T10372] ref_ctr decrement failed for inode: 0x3eb5 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000464a2938 [ 299.194103][T10399] CPU: 1 PID: 10399 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 299.202443][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.212504][T10399] Call Trace: [ 299.215802][T10399] dump_stack+0x188/0x20d [ 299.217570][T10372] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 299.220225][T10399] should_fail.cold+0x5/0xa [ 299.220259][T10399] ? fault_create_debugfs_attr+0x140/0x140 [ 299.220283][T10399] should_failslab+0x5/0xf [ 299.220298][T10399] __kmalloc+0x2d9/0x7a0 [ 299.220322][T10399] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 299.220337][T10399] ? tomoyo_realpath_from_path+0xc2/0x620 [ 299.220355][T10399] ? lock_release+0x800/0x800 [ 299.220368][T10399] ? __lock_acquire+0xc6c/0x48a0 [ 299.220386][T10399] tomoyo_realpath_from_path+0xc2/0x620 [ 299.220400][T10399] ? tomoyo_profile+0x42/0x50 [ 299.220423][T10399] tomoyo_path_number_perm+0x1c2/0x4d0 [ 299.220438][T10399] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 299.220462][T10399] ? tomoyo_execute_permission+0x470/0x470 [ 299.220489][T10399] ? __fget_files+0x30d/0x500 [ 299.220522][T10399] ? __fget_files+0x32f/0x500 [ 299.220541][T10399] ? ksys_dup3+0x3c0/0x3c0 [ 299.220559][T10399] ? __sb_end_write+0x101/0x1d0 [ 299.238576][T10372] ref_ctr decrement failed for inode: 0x3eb5 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000464a2938 [ 299.238806][T10399] ? vfs_write+0x161/0x5d0 [ 299.238830][T10399] security_file_ioctl+0x6c/0xb0 [ 299.238851][T10399] ksys_ioctl+0x50/0x180 [ 299.238870][T10399] __x64_sys_ioctl+0x6f/0xb0 [ 299.343832][T10399] do_syscall_64+0xf6/0x7d0 [ 299.348458][T10399] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 299.354367][T10399] RIP: 0033:0x45ca59 [ 299.358266][T10399] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.377887][T10399] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.386385][T10399] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 299.394342][T10399] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 05:17:49 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 299.402305][T10399] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.410291][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 299.418258][T10399] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 299.433818][T10399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.560617][T10394] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 299.568771][T10394] ref_ctr decrement failed for inode: 0x3ed6 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008f70b2cf [ 299.622476][T10394] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 299.643151][T10394] ref_ctr decrement failed for inode: 0x3ed6 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008f70b2cf 05:17:50 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:50 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:50 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 05:17:50 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:17:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 299.967196][T10419] FAULT_INJECTION: forcing a failure. [ 299.967196][T10419] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 299.980545][T10419] CPU: 0 PID: 10419 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 299.988872][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.999045][T10419] Call Trace: [ 300.002346][T10419] dump_stack+0x188/0x20d [ 300.006691][T10419] should_fail.cold+0x5/0xa [ 300.012056][T10419] ? fault_create_debugfs_attr+0x140/0x140 [ 300.012075][T10419] ? print_usage_bug+0x240/0x240 [ 300.012100][T10419] __alloc_pages_nodemask+0x17a/0x810 [ 300.012122][T10419] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 300.035481][T10419] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 300.035498][T10419] ? print_usage_bug+0x240/0x240 [ 300.035519][T10419] cache_grow_begin+0x8c/0xc10 [ 300.035536][T10419] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 300.035554][T10419] __kmalloc+0x6dc/0x7a0 05:17:50 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 300.035569][T10419] ? tomoyo_realpath_from_path+0xc2/0x620 05:17:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 300.035585][T10419] ? lock_release+0x800/0x800 [ 300.035598][T10419] ? __lock_acquire+0xc6c/0x48a0 [ 300.035617][T10419] tomoyo_realpath_from_path+0xc2/0x620 [ 300.035632][T10419] ? tomoyo_profile+0x42/0x50 [ 300.035656][T10419] tomoyo_path_number_perm+0x1c2/0x4d0 [ 300.035671][T10419] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 300.035689][T10419] ? tomoyo_execute_permission+0x470/0x470 [ 300.035721][T10419] ? __fget_files+0x30d/0x500 [ 300.035756][T10419] ? __fget_files+0x32f/0x500 [ 300.035775][T10419] ? ksys_dup3+0x3c0/0x3c0 [ 300.035788][T10419] ? __sb_end_write+0x101/0x1d0 [ 300.035801][T10419] ? vfs_write+0x161/0x5d0 [ 300.035824][T10419] security_file_ioctl+0x6c/0xb0 [ 300.035843][T10419] ksys_ioctl+0x50/0x180 [ 300.035862][T10419] __x64_sys_ioctl+0x6f/0xb0 [ 300.035879][T10419] do_syscall_64+0xf6/0x7d0 [ 300.035898][T10419] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 300.035909][T10419] RIP: 0033:0x45ca59 [ 300.035924][T10419] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.035932][T10419] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.035946][T10419] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 300.035955][T10419] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 300.035963][T10419] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.035971][T10419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 300.035980][T10419] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 300.230092][T10434] FAULT_INJECTION: forcing a failure. [ 300.230092][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 300.454948][T10434] CPU: 1 PID: 10434 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 300.463298][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.473352][T10434] Call Trace: [ 300.476655][T10434] dump_stack+0x188/0x20d [ 300.480995][T10434] should_fail.cold+0x5/0xa [ 300.485507][T10434] ? fault_create_debugfs_attr+0x140/0x140 [ 300.491319][T10434] ? get_fs_root_and_pwd_rcu.isra.0+0x3a0/0x3a0 [ 300.497569][T10434] should_failslab+0x5/0xf [ 300.501987][T10434] __kmalloc+0x2d9/0x7a0 [ 300.506232][T10434] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 300.511605][T10434] ? d_absolute_path+0x10c/0x160 [ 300.516548][T10434] ? __d_path+0x140/0x140 [ 300.520886][T10434] tomoyo_encode2.part.0+0xec/0x3b0 [ 300.526089][T10434] tomoyo_encode+0x28/0x50 [ 300.530518][T10434] tomoyo_realpath_from_path+0x184/0x620 [ 300.536163][T10434] tomoyo_path_number_perm+0x1c2/0x4d0 [ 300.541629][T10434] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 300.547274][T10434] ? tomoyo_execute_permission+0x470/0x470 [ 300.553092][T10434] ? __fget_files+0x30d/0x500 [ 300.557791][T10434] ? __fget_files+0x32f/0x500 [ 300.562471][T10434] ? ksys_dup3+0x3c0/0x3c0 [ 300.566888][T10434] ? __sb_end_write+0x101/0x1d0 [ 300.571739][T10434] ? vfs_write+0x161/0x5d0 [ 300.576175][T10434] security_file_ioctl+0x6c/0xb0 [ 300.581119][T10434] ksys_ioctl+0x50/0x180 [ 300.585372][T10434] __x64_sys_ioctl+0x6f/0xb0 [ 300.589968][T10434] do_syscall_64+0xf6/0x7d0 [ 300.594476][T10434] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 300.600365][T10434] RIP: 0033:0x45ca59 [ 300.604257][T10434] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.623895][T10434] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.623911][T10434] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 05:17:50 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 300.623919][T10434] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 300.623927][T10434] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 300.623935][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 300.623944][T10434] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 300.692004][T10434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.744006][T10423] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 300.754313][T10423] ref_ctr decrement failed for inode: 0x3ee8 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000001f641afb [ 300.777380][T10423] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 300.777762][T10448] FAULT_INJECTION: forcing a failure. [ 300.777762][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 300.787128][T10423] ref_ctr decrement failed for inode: 0x3ee8 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000001f641afb [ 300.817992][T10448] CPU: 1 PID: 10448 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 300.826451][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.836686][T10448] Call Trace: [ 300.840063][T10448] dump_stack+0x188/0x20d [ 300.844392][T10448] should_fail.cold+0x5/0xa [ 300.848892][T10448] ? fault_create_debugfs_attr+0x140/0x140 [ 300.854706][T10448] should_failslab+0x5/0xf [ 300.859115][T10448] __kmalloc+0x2d9/0x7a0 [ 300.863371][T10448] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 300.868824][T10448] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 300.874486][T10448] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 300.879777][T10448] n_hdlc_tty_open+0x240/0x396 [ 300.884538][T10448] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 300.889997][T10448] tty_ldisc_open.isra.0+0x9b/0x110 [ 300.895204][T10448] tty_set_ldisc+0x2e8/0x670 [ 300.899790][T10448] tty_ioctl+0xcde/0x1440 [ 300.904138][T10448] ? tty_vhangup+0x30/0x30 [ 300.908560][T10448] ? do_vfs_ioctl+0x50c/0x1360 [ 300.913319][T10448] ? ioctl_file_clone+0x180/0x180 [ 300.918337][T10448] ? __fget_files+0x32f/0x500 [ 300.923009][T10448] ? ksys_dup3+0x3c0/0x3c0 [ 300.927414][T10448] ? __sb_end_write+0x101/0x1d0 [ 300.932271][T10448] ? vfs_write+0x161/0x5d0 [ 300.936707][T10448] ? tty_vhangup+0x30/0x30 [ 300.941129][T10448] ksys_ioctl+0x11a/0x180 [ 300.945465][T10448] __x64_sys_ioctl+0x6f/0xb0 [ 300.950066][T10448] do_syscall_64+0xf6/0x7d0 [ 300.954570][T10448] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 300.960809][T10448] RIP: 0033:0x45ca59 [ 300.964723][T10448] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.984352][T10448] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:17:51 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) [ 300.992777][T10448] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 301.000757][T10448] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 301.008722][T10448] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.016688][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 301.024668][T10448] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 05:17:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 301.127502][T10422] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 301.159479][T10422] ref_ctr decrement failed for inode: 0x3ee7 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000068aae062 05:17:51 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 301.180187][T10422] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 301.188345][T10422] ref_ctr decrement failed for inode: 0x3ee7 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000068aae062 [ 301.266319][T10457] FAULT_INJECTION: forcing a failure. [ 301.266319][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 301.299325][T10457] CPU: 1 PID: 10457 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 301.307680][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.317736][T10457] Call Trace: [ 301.321044][T10457] dump_stack+0x188/0x20d [ 301.325391][T10457] should_fail.cold+0x5/0xa [ 301.329905][T10457] ? fault_create_debugfs_attr+0x140/0x140 [ 301.335717][T10457] should_failslab+0x5/0xf [ 301.340135][T10457] __kmalloc+0x2d9/0x7a0 [ 301.344375][T10457] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 301.349833][T10457] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 301.355384][T10457] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 301.360783][T10457] n_hdlc_tty_open+0x240/0x396 [ 301.365554][T10457] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 301.371023][T10457] tty_ldisc_open.isra.0+0x9b/0x110 [ 301.376226][T10457] tty_set_ldisc+0x2e8/0x670 [ 301.380827][T10457] tty_ioctl+0xcde/0x1440 [ 301.385164][T10457] ? tty_vhangup+0x30/0x30 [ 301.389585][T10457] ? do_vfs_ioctl+0x50c/0x1360 [ 301.394357][T10457] ? ioctl_file_clone+0x180/0x180 [ 301.399392][T10457] ? __fget_files+0x32f/0x500 [ 301.404079][T10457] ? ksys_dup3+0x3c0/0x3c0 [ 301.408498][T10457] ? __sb_end_write+0x101/0x1d0 [ 301.414479][T10457] ? vfs_write+0x161/0x5d0 [ 301.418904][T10457] ? tty_vhangup+0x30/0x30 [ 301.423323][T10457] ksys_ioctl+0x11a/0x180 [ 301.428628][T10457] __x64_sys_ioctl+0x6f/0xb0 [ 301.433316][T10457] do_syscall_64+0xf6/0x7d0 [ 301.437832][T10457] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 301.443725][T10457] RIP: 0033:0x45ca59 05:17:51 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 301.448502][T10457] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.468107][T10457] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.476523][T10457] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 301.484499][T10457] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 301.492475][T10457] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.500458][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 301.508432][T10457] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 05:17:51 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 301.561402][T10414] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 05:17:51 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 301.605151][T10414] ref_ctr decrement failed for inode: 0x3ee0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006d8af4c0 [ 301.646160][T10414] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 301.685656][T10414] ref_ctr decrement failed for inode: 0x3ee0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006d8af4c0 [ 301.689088][T10468] FAULT_INJECTION: forcing a failure. [ 301.689088][T10468] name failslab, interval 1, probability 0, space 0, times 0 [ 301.715262][T10468] CPU: 0 PID: 10468 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 301.723600][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.733660][T10468] Call Trace: [ 301.736961][T10468] dump_stack+0x188/0x20d [ 301.741309][T10468] should_fail.cold+0x5/0xa [ 301.745822][T10468] ? fault_create_debugfs_attr+0x140/0x140 [ 301.751633][T10468] ? n_hdlc_alloc_buf.isra.0+0x44/0xb0 [ 301.757107][T10468] should_failslab+0x5/0xf [ 301.761525][T10468] __kmalloc+0x2d9/0x7a0 [ 301.766643][T10468] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 301.772104][T10468] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 301.777946][T10468] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 301.783937][T10468] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 301.789235][T10468] n_hdlc_tty_open+0x240/0x396 [ 301.794002][T10468] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 301.799465][T10468] tty_ldisc_open.isra.0+0x9b/0x110 [ 301.804670][T10468] tty_set_ldisc+0x2e8/0x670 [ 301.809266][T10468] tty_ioctl+0xcde/0x1440 [ 301.814557][T10468] ? tty_vhangup+0x30/0x30 [ 301.818977][T10468] ? do_vfs_ioctl+0x50c/0x1360 [ 301.823751][T10468] ? ioctl_file_clone+0x180/0x180 [ 301.828780][T10468] ? __fget_files+0x32f/0x500 [ 301.833472][T10468] ? ksys_dup3+0x3c0/0x3c0 [ 301.837897][T10468] ? __sb_end_write+0x101/0x1d0 [ 301.842753][T10468] ? vfs_write+0x161/0x5d0 [ 301.847201][T10468] ? tty_vhangup+0x30/0x30 [ 301.851627][T10468] ksys_ioctl+0x11a/0x180 [ 301.855966][T10468] __x64_sys_ioctl+0x6f/0xb0 [ 301.860566][T10468] do_syscall_64+0xf6/0x7d0 [ 301.865087][T10468] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 301.870978][T10468] RIP: 0033:0x45ca59 [ 301.874907][T10468] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.894509][T10468] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.902906][T10468] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 301.910868][T10468] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 301.918827][T10468] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 301.926791][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 301.934751][T10468] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 05:17:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/23, 0x17}, 0x40012001) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x80000) truncate(0x0, 0x0) 05:17:52 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x3}, 0x14}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x0) splice(r2, 0x0, r6, 0x0, 0x4ffe0, 0x0) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x0, 0x1, 0x2, "fa7ccb57b9b3d39242f3c2011b182e8579d94cce8bc6e475924bf61a2a9f9267", 0x32314d59}) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f00000000c0)={0x4b, "e3d418765be4b710f35d238bf23dc27f7645573c573e60d171575ecc46992119805288b2e0e021e80697400314fb5194b567cf3252916b9ed6fc6f7c048f2b3f400695fdd9d430e285c23d"}) 05:17:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) [ 302.121019][T10477] FAULT_INJECTION: forcing a failure. [ 302.121019][T10477] name failslab, interval 1, probability 0, space 0, times 0 [ 302.164453][T10477] CPU: 0 PID: 10477 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 302.172813][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.182871][T10477] Call Trace: [ 302.186172][T10477] dump_stack+0x188/0x20d [ 302.190522][T10477] should_fail.cold+0x5/0xa [ 302.195058][T10477] ? fault_create_debugfs_attr+0x140/0x140 [ 302.200870][T10477] ? n_hdlc_alloc_buf.isra.0+0x44/0xb0 [ 302.207060][T10477] should_failslab+0x5/0xf [ 302.207076][T10477] __kmalloc+0x2d9/0x7a0 [ 302.207092][T10477] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.207107][T10477] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 302.207120][T10477] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 302.207136][T10477] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.207148][T10477] n_hdlc_tty_open+0x240/0x396 [ 302.207158][T10477] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 302.207171][T10477] tty_ldisc_open.isra.0+0x9b/0x110 [ 302.207183][T10477] tty_set_ldisc+0x2e8/0x670 [ 302.207204][T10477] tty_ioctl+0xcde/0x1440 [ 302.207216][T10477] ? tty_vhangup+0x30/0x30 [ 302.207230][T10477] ? do_vfs_ioctl+0x50c/0x1360 [ 302.207244][T10477] ? ioctl_file_clone+0x180/0x180 05:17:52 executing program 4: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) mount$overlay(0x400000, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)='overlay\x00', 0x1002004, &(0x7f00000000c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0', @ANYRESHEX=r0, @ANYRESHEX=r1]) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000340)="41af5ff5ecdb8e4499d898e7bc8a186e8ac7b42dabc11d3df572395fe1d09a741fa3e93c33e255ebe80ea594af39d2fb80abec459441152825c811b8db590af2d3e0faeef944fd28ed6d70899d4ae30a40c522fa9d5b0c2674d09fcd4926a0d46f35b147c443d95eccf639f2eda0e1b4e99c991fd5bf8e8b42cb36dc489a9f4dddffa3a91204ad48417c76c2201643744274ae508158461de537e9ec780814c75aa544f9388d22e91ed8b64c60a37622634b5769c35e90064673fc240e7b93777bcf7581c60f857a87279795d09e3058608b15c503cbab0120a950df400171343f007cf31fb5") write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[], 0x5) [ 302.207257][T10477] ? __fget_files+0x32f/0x500 [ 302.207270][T10477] ? ksys_dup3+0x3c0/0x3c0 [ 302.207281][T10477] ? __sb_end_write+0x101/0x1d0 [ 302.207291][T10477] ? vfs_write+0x161/0x5d0 [ 302.207306][T10477] ? tty_vhangup+0x30/0x30 [ 302.207318][T10477] ksys_ioctl+0x11a/0x180 [ 302.207332][T10477] __x64_sys_ioctl+0x6f/0xb0 05:17:52 executing program 0 (fault-call:1 fault-nth:7): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 302.207346][T10477] do_syscall_64+0xf6/0x7d0 [ 302.207358][T10477] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.207367][T10477] RIP: 0033:0x45ca59 [ 302.207378][T10477] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.207384][T10477] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.207394][T10477] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 302.207400][T10477] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 302.207406][T10477] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.207413][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.207419][T10477] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 302.345233][T10487] Unknown ioctl 9218 05:17:52 executing program 0 (fault-call:1 fault-nth:8): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 302.538148][T10493] FAULT_INJECTION: forcing a failure. [ 302.538148][T10493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:17:52 executing program 4: syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) write$sndseq(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="c8fe5a0be857f1", @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 302.538166][T10493] CPU: 1 PID: 10493 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 302.538175][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.538180][T10493] Call Trace: [ 302.538202][T10493] dump_stack+0x188/0x20d [ 302.538224][T10493] should_fail.cold+0x5/0xa [ 302.538242][T10493] ? fault_create_debugfs_attr+0x140/0x140 05:17:53 executing program 0 (fault-call:1 fault-nth:9): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 302.538259][T10493] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 302.538276][T10493] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 302.538298][T10493] __alloc_pages_nodemask+0x17a/0x810 [ 302.538318][T10493] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 05:17:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) dup2(r4, r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x1, 0x4}}, 0x2e) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @remote}, {0x6, @link_local}, 0x44, {0x2, 0x4e21, @multicast2}, 'syzkaller0\x00'}) 05:17:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101001, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20800, &(0x7f0000000000)=ANY=[]) [ 302.538332][T10493] ? find_held_lock+0x2d/0x110 [ 302.538361][T10493] cache_grow_begin+0x8c/0xc10 [ 302.538377][T10493] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 302.538395][T10493] __kmalloc+0x6dc/0x7a0 [ 302.538409][T10493] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.538425][T10493] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 302.538446][T10493] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.538472][T10493] n_hdlc_tty_open+0x240/0x396 [ 302.538488][T10493] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 302.538506][T10493] tty_ldisc_open.isra.0+0x9b/0x110 [ 302.538524][T10493] tty_set_ldisc+0x2e8/0x670 05:17:53 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:53 executing program 0 (fault-call:1 fault-nth:10): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r2, 0x0) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 05:17:53 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$rose(r1, &(0x7f0000000280)="ac482a778d0ced01ad8171574c68323342a4267cd8f7846485e299725b90854ebb48a8b859d15a3fd593f21129477c3e5a7f4910813208d52793102c659816802056e61ae111eb02940bc969a39102f2af4ca250154ebca441b0facb6cf6c19258b33b003ea5ce07c0c3b38d4d35bd274277af88245a8916b19072dd72baa47452303dff4b5cd2552245aa274576d6c65dd38b6539ca6b21c0673b50353c31458043badcb27878a1c017d97c0978ca1f3c78e843d862114cc884b3f3", 0xbc, 0x4014, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000005004000019000300e60100006c000000010000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) [ 302.538543][T10493] tty_ioctl+0xcde/0x1440 [ 302.538559][T10493] ? tty_vhangup+0x30/0x30 [ 302.538576][T10493] ? do_vfs_ioctl+0x50c/0x1360 [ 302.538596][T10493] ? ioctl_file_clone+0x180/0x180 [ 302.538612][T10493] ? __fget_files+0x32f/0x500 [ 302.538630][T10493] ? ksys_dup3+0x3c0/0x3c0 [ 302.538643][T10493] ? __sb_end_write+0x101/0x1d0 [ 302.538656][T10493] ? vfs_write+0x161/0x5d0 [ 302.538685][T10493] ? tty_vhangup+0x30/0x30 [ 302.538702][T10493] ksys_ioctl+0x11a/0x180 [ 302.538722][T10493] __x64_sys_ioctl+0x6f/0xb0 [ 302.538739][T10493] do_syscall_64+0xf6/0x7d0 [ 302.538758][T10493] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.538769][T10493] RIP: 0033:0x45ca59 [ 302.538784][T10493] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.538792][T10493] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.538806][T10493] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 302.538815][T10493] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 302.538823][T10493] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.538832][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.538841][T10493] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 302.678259][T10497] FAULT_INJECTION: forcing a failure. [ 302.678259][T10497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.678277][T10497] CPU: 0 PID: 10497 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 302.678286][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.678291][T10497] Call Trace: [ 302.678311][T10497] dump_stack+0x188/0x20d [ 302.678334][T10497] should_fail.cold+0x5/0xa [ 302.678353][T10497] ? fault_create_debugfs_attr+0x140/0x140 [ 302.678370][T10497] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 302.678395][T10497] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 302.678417][T10497] __alloc_pages_nodemask+0x17a/0x810 [ 302.678438][T10497] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 302.678452][T10497] ? find_held_lock+0x2d/0x110 [ 302.678481][T10497] cache_grow_begin+0x8c/0xc10 [ 302.678497][T10497] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 302.678514][T10497] __kmalloc+0x6dc/0x7a0 [ 302.678529][T10497] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.678544][T10497] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 302.678566][T10497] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.678582][T10497] n_hdlc_tty_open+0x240/0x396 [ 302.678595][T10497] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 302.678612][T10497] tty_ldisc_open.isra.0+0x9b/0x110 [ 302.678628][T10497] tty_set_ldisc+0x2e8/0x670 [ 302.678645][T10497] tty_ioctl+0xcde/0x1440 [ 302.678660][T10497] ? tty_vhangup+0x30/0x30 [ 302.678677][T10497] ? do_vfs_ioctl+0x50c/0x1360 [ 302.678696][T10497] ? ioctl_file_clone+0x180/0x180 [ 302.678712][T10497] ? __fget_files+0x32f/0x500 [ 302.678729][T10497] ? ksys_dup3+0x3c0/0x3c0 [ 302.678742][T10497] ? __sb_end_write+0x101/0x1d0 [ 302.678755][T10497] ? vfs_write+0x161/0x5d0 [ 302.678774][T10497] ? tty_vhangup+0x30/0x30 [ 302.678789][T10497] ksys_ioctl+0x11a/0x180 [ 302.678808][T10497] __x64_sys_ioctl+0x6f/0xb0 [ 302.678825][T10497] do_syscall_64+0xf6/0x7d0 [ 302.678844][T10497] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.678856][T10497] RIP: 0033:0x45ca59 [ 302.678871][T10497] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.678879][T10497] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.678893][T10497] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 302.678902][T10497] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 302.678910][T10497] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.678919][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.678928][T10497] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 302.764449][T10500] 9pnet: Insufficient options for proto=fd [ 302.768504][T10501] 9pnet: Insufficient options for proto=fd [ 302.863486][T10505] FAULT_INJECTION: forcing a failure. [ 302.863486][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 302.863506][T10505] CPU: 1 PID: 10505 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 302.863514][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.863520][T10505] Call Trace: [ 302.863549][T10505] dump_stack+0x188/0x20d [ 302.863571][T10505] should_fail.cold+0x5/0xa [ 302.863588][T10505] ? fault_create_debugfs_attr+0x140/0x140 [ 302.863603][T10505] ? n_hdlc_alloc_buf.isra.0+0x44/0xb0 [ 302.863624][T10505] should_failslab+0x5/0xf [ 302.863638][T10505] __kmalloc+0x2d9/0x7a0 [ 302.863652][T10505] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.863667][T10505] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 302.863683][T10505] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 302.863703][T10505] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 302.863720][T10505] n_hdlc_tty_open+0x240/0x396 [ 302.863734][T10505] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 302.863752][T10505] tty_ldisc_open.isra.0+0x9b/0x110 [ 302.863769][T10505] tty_set_ldisc+0x2e8/0x670 [ 302.863787][T10505] tty_ioctl+0xcde/0x1440 [ 302.863803][T10505] ? tty_vhangup+0x30/0x30 [ 302.863820][T10505] ? do_vfs_ioctl+0x50c/0x1360 [ 302.863840][T10505] ? ioctl_file_clone+0x180/0x180 [ 302.863858][T10505] ? __fget_files+0x32f/0x500 [ 302.863878][T10505] ? ksys_dup3+0x3c0/0x3c0 [ 302.863892][T10505] ? __sb_end_write+0x101/0x1d0 [ 302.863906][T10505] ? vfs_write+0x161/0x5d0 [ 302.863928][T10505] ? tty_vhangup+0x30/0x30 [ 302.863944][T10505] ksys_ioctl+0x11a/0x180 [ 302.863962][T10505] __x64_sys_ioctl+0x6f/0xb0 [ 302.863980][T10505] do_syscall_64+0xf6/0x7d0 [ 302.863997][T10505] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 302.864009][T10505] RIP: 0033:0x45ca59 [ 302.864023][T10505] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.864030][T10505] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.864044][T10505] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 302.864053][T10505] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 302.864062][T10505] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.864071][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.864080][T10505] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 302.925478][T10467] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 302.925496][T10467] ref_ctr decrement failed for inode: 0x3ee3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000810724fd [ 302.925707][T10467] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 302.925721][T10467] ref_ctr decrement failed for inode: 0x3ee3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000810724fd [ 303.228301][T10526] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 303.228627][T10526] EXT4-fs (loop4): bad geometry: block count 1104 exceeds size of device (1 blocks) [ 303.252185][T10528] FAULT_INJECTION: forcing a failure. [ 303.252185][T10528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.919072][T10528] CPU: 1 PID: 10528 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 303.927379][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.937421][T10528] Call Trace: [ 303.940702][T10528] dump_stack+0x188/0x20d [ 303.945017][T10528] should_fail.cold+0x5/0xa [ 303.949504][T10528] ? fault_create_debugfs_attr+0x140/0x140 [ 303.955298][T10528] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 303.961273][T10528] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 303.967339][T10528] __alloc_pages_nodemask+0x17a/0x810 [ 303.972712][T10528] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 303.979459][T10528] ? find_held_lock+0x2d/0x110 [ 303.984217][T10528] cache_grow_begin+0x8c/0xc10 [ 303.988964][T10528] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 303.994405][T10528] __kmalloc+0x6dc/0x7a0 [ 303.998625][T10528] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 304.004083][T10528] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 304.010082][T10528] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 304.015351][T10528] n_hdlc_tty_open+0x240/0x396 [ 304.020095][T10528] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 304.025540][T10528] tty_ldisc_open.isra.0+0x9b/0x110 [ 304.030721][T10528] tty_set_ldisc+0x2e8/0x670 [ 304.035296][T10528] tty_ioctl+0xcde/0x1440 [ 304.039612][T10528] ? tty_vhangup+0x30/0x30 [ 304.044012][T10528] ? do_vfs_ioctl+0x50c/0x1360 [ 304.048769][T10528] ? ioctl_file_clone+0x180/0x180 [ 304.053785][T10528] ? __fget_files+0x32f/0x500 [ 304.058452][T10528] ? ksys_dup3+0x3c0/0x3c0 [ 304.062854][T10528] ? __sb_end_write+0x101/0x1d0 [ 304.067683][T10528] ? vfs_write+0x161/0x5d0 [ 304.072083][T10528] ? tty_vhangup+0x30/0x30 [ 304.076482][T10528] ksys_ioctl+0x11a/0x180 [ 304.080794][T10528] __x64_sys_ioctl+0x6f/0xb0 [ 304.085364][T10528] do_syscall_64+0xf6/0x7d0 [ 304.089850][T10528] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 304.095720][T10528] RIP: 0033:0x45ca59 [ 304.099598][T10528] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.119198][T10528] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.127593][T10528] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 304.135543][T10528] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 304.143511][T10528] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 304.151462][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 304.159417][T10528] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 05:17:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) 05:17:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x8, 0x0, [], 0x6, 0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x70, 0x1, 0x5, 0x40, 0x1, 0x0, 0x9, 0x8008, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x5, @perf_config_ext={0x4, 0x7f}, 0x40188, 0x5, 0x43d, 0x4, 0xffff, 0x3, 0x2}, r1, 0x4, r2, 0x0) preadv(r1, &(0x7f00000017c0), 0x315, 0x0) 05:17:54 executing program 0 (fault-call:1 fault-nth:11): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:54 executing program 1: write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x7, 0x0, 0x0, @time, {}, {}, @connect}], 0x1feea0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000076f70000002008000a006b930b3dd69aac589ff588fcfe9784f5ebb9fd7ffc9c1403d27913c41df01cf8b384127726df3af2bc24375c9346895368285d10baa1dd88837ab9537489ccabc1d182f2b6215a186dfb2fcc723709f196a5d5bc3d395deb06002ac196bb1feebb8a3ed5fcbf3b6721e080172aa16ae0e4deb5cbfa93e58929626225985d25e266f07068ce3a355afa4a4c2ca31844b12eabe0a01683383ca8f985181cfdfd179fda8431eab34e2d325527dee7f248a13384251a71e1ff5f03", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) [ 304.341534][T10543] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 304.361735][T10543] EXT4-fs (loop4): bad geometry: block count 1104 exceeds size of device (1 blocks) [ 304.386305][T10548] device bridge_slave_0 left promiscuous mode [ 304.409565][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.423384][T10549] FAULT_INJECTION: forcing a failure. [ 304.423384][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 304.446431][T10549] CPU: 1 PID: 10549 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 304.454779][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.464834][T10549] Call Trace: [ 304.468144][T10549] dump_stack+0x188/0x20d [ 304.472486][T10549] should_fail.cold+0x5/0xa [ 304.477000][T10549] ? fault_create_debugfs_attr+0x140/0x140 [ 304.482811][T10549] ? n_hdlc_alloc_buf.isra.0+0x44/0xb0 [ 304.488281][T10549] should_failslab+0x5/0xf [ 304.492698][T10549] __kmalloc+0x2d9/0x7a0 [ 304.496938][T10549] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 304.502397][T10549] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 304.508203][T10549] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 304.514190][T10549] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 304.519493][T10549] n_hdlc_tty_open+0x240/0x396 [ 304.524246][T10549] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 304.529801][T10549] tty_ldisc_open.isra.0+0x9b/0x110 [ 304.534997][T10549] tty_set_ldisc+0x2e8/0x670 [ 304.539589][T10549] tty_ioctl+0xcde/0x1440 [ 304.543908][T10549] ? tty_vhangup+0x30/0x30 [ 304.548305][T10549] ? do_vfs_ioctl+0x50c/0x1360 [ 304.553063][T10549] ? ioctl_file_clone+0x180/0x180 [ 304.558077][T10549] ? __fget_files+0x32f/0x500 [ 304.562820][T10549] ? ksys_dup3+0x3c0/0x3c0 [ 304.567218][T10549] ? __sb_end_write+0x101/0x1d0 [ 304.572061][T10549] ? vfs_write+0x161/0x5d0 [ 304.576475][T10549] ? tty_vhangup+0x30/0x30 [ 304.580878][T10549] ksys_ioctl+0x11a/0x180 [ 304.585190][T10549] __x64_sys_ioctl+0x6f/0xb0 [ 304.589772][T10549] do_syscall_64+0xf6/0x7d0 [ 304.594283][T10549] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 304.600160][T10549] RIP: 0033:0x45ca59 [ 304.604042][T10549] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.623732][T10549] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.632145][T10549] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 304.640115][T10549] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 304.648079][T10549] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 304.656050][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 304.664011][T10549] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 304.681763][T10534] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 304.725094][T10534] ref_ctr decrement failed for inode: 0x3d77 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d48e805d 05:17:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendto$phonet(r0, &(0x7f0000000c80)="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", 0xf00, 0x0, &(0x7f00000000c0), 0x10) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 05:17:55 executing program 1: bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x60000000, 0x0, 0x0, 0x0, 0xa401000000000000, 0xcc4}}], 0x210, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xa1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4) [ 304.768154][T10534] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 304.797496][T10534] ref_ctr decrement failed for inode: 0x3d77 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d48e805d 05:17:55 executing program 0 (fault-call:1 fault-nth:12): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 305.083731][T10560] overlayfs: upper fs does not support tmpfile. [ 305.123023][T10560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 305.139590][T10567] FAULT_INJECTION: forcing a failure. [ 305.139590][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 305.152711][T10560] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 305.174509][T10567] CPU: 1 PID: 10567 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 305.182858][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.192915][T10567] Call Trace: [ 305.196217][T10567] dump_stack+0x188/0x20d [ 305.202993][T10567] should_fail.cold+0x5/0xa [ 305.207510][T10567] ? fault_create_debugfs_attr+0x140/0x140 [ 305.213321][T10567] ? n_hdlc_alloc_buf.isra.0+0x44/0xb0 [ 305.218797][T10567] should_failslab+0x5/0xf [ 305.223241][T10567] __kmalloc+0x2d9/0x7a0 [ 305.227492][T10567] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 305.232959][T10567] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 305.238766][T10567] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 305.244765][T10567] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 305.250058][T10567] n_hdlc_tty_open+0x240/0x396 [ 305.254828][T10567] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 305.260303][T10567] tty_ldisc_open.isra.0+0x9b/0x110 [ 305.265508][T10567] tty_set_ldisc+0x2e8/0x670 [ 305.270107][T10567] tty_ioctl+0xcde/0x1440 [ 305.274440][T10567] ? tty_vhangup+0x30/0x30 [ 305.279033][T10567] ? do_vfs_ioctl+0x50c/0x1360 [ 305.283808][T10567] ? ioctl_file_clone+0x180/0x180 [ 305.288838][T10567] ? __fget_files+0x32f/0x500 [ 305.293529][T10567] ? ksys_dup3+0x3c0/0x3c0 [ 305.297945][T10567] ? __sb_end_write+0x101/0x1d0 [ 305.302799][T10567] ? vfs_write+0x161/0x5d0 [ 305.307226][T10567] ? tty_vhangup+0x30/0x30 [ 305.311646][T10567] ksys_ioctl+0x11a/0x180 [ 305.315983][T10567] __x64_sys_ioctl+0x6f/0xb0 [ 305.320584][T10567] do_syscall_64+0xf6/0x7d0 [ 305.325699][T10567] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 305.331595][T10567] RIP: 0033:0x45ca59 [ 305.335492][T10567] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.355092][T10567] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.363506][T10567] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 305.371482][T10567] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 305.379465][T10567] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 05:17:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket$inet(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x36, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x50000}, 0x0) r4 = shmat(0x0, &(0x7f0000dcb000/0x4000)=nil, 0x4000) shmdt(r4) shmdt(r4) [ 305.387445][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 305.395416][T10567] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 305.523235][T10571] overlayfs: filesystem on './file0' not supported as upperdir 05:17:56 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendto$phonet(r0, &(0x7f0000000c80)="e8f307389035ac9874e387971cc01a14a9880907e105ef80edb581b340c6ca66c6890270f16ae5fd0719593a9c90616c6f6eb5271ebb90d2ba5a30414d756dbe57fee317cd5f150a41ad8888be7bf01d02a203ffb3da7d933846ab90a0ff045d4d2908e66e89d429e521c09e0ac1eacb71d85790339bf12916846eac62cb6c141329dc0b727cad05a5f0e1806bb9d79f50daf41a891ff7d38164f0351248d51cbf326fee55988a34703574b839660933980ecafa563031efc17dbbb248ee7aa85d53677b183cb2a572d2036fbd04e73cae4fe5f563990a2175d677fcef2d99e78a348551069baa6a55159f2ab51bd429dd9386b31c9d1265802ce69dc143b01ebf95424fd12904af234d8528154f8373d236fa91503ca7d37f2a0f575530238d4c607c884f1912e21344144a4061ccbdc19650a5afc3ba1dd293a59bc859f793eff7760e4d71cddbb97a5361fe7f2e806d56b997ae7c2c8e54bc55cc57b98d70b9f7aaafd868b0f1fec87255868c92decbace5d300620c44458d29d3ddcde81120c480fd080157d29f5a694d4a706c6b7de730b3c7ad1b9b75b8ae64371a0d706f692243a403b3a6279b217d1efd2acdf6a999b836dacb2e1e10cefc12597c9f07fa7bb223a2cbf081390502e079a1df69d139f819ee563164df2968314f8153dc2d61e9ac2ed484d3cfdf15805f56a2c1c8e51c493cfac5ea3ae681c35b5923a6435cbde19ec60c5473572dba55f8dfedf8212c8093c8b8b8f1c3a8bb6445fd0962b8f5d7fdaf262675ec7745efa5c5b5e53beedf2519a0c6347bbdd61fc9f6899cceb5ac8470169140b554dacf9aa05230b962d8fce53b88aec07e4e8d781674748e4acd5b15a071db54718d72cd36f9c2fe8cb4c8e89da7807cb31c50f25868ce1dd63ee660145d9fc8c6633f395780d6eb9fb899d3122cd09bb6c3b82fc36a61fefe12dcb85d49fd416ce0283810127269d51d2296ebedd22cc17c225a78f7fe8f08420b03b14fdeafd8bdfd25ee775f8aae4d15cce175efe567cd4c8db50946ddab74c6f4fb224560952209eed12ed047eb08a30256e8c404f25e557c16d530b63bb5d4706afa5ef220e8cc8ef231703db3ee138e87890f269f1c35fe56325574396833383b8bbb6180ada2a1f34cef571c8fe21e25fd9d72dba4dfd630fa3a36428a8a8f6fb6665e31d8aa49a78a1050eb53bfe9f04278de77978bed593694808b8cddac08890ed7d6ced2014a4d6f06df86742e95ca8132aaa1b1ff1a97764b4ea5c7aafce2bbcbbd15e80eb4efb873cd9af80332a7033b90205ad2294ff6e5391086748c8c80319a35f1389c1a24f8ad7a3f6a0c199eca98266e99f108bd22413ece1495b46028b24e0e002625dcd28f6a4e50493f79b28ca6a60e45b2f75c92afa5e86b3cde3d30d83ab80b9c3af9a4588f6269b3d1aa98af2f795e3b5113ecefbc4a2af10a4122ef882372bf6ee9ed1580028f7ac95a0579646b96ecac236155b9040fc18e110719be1568286c4d8d28bf649c1bb52493cf2ef67e21aed8034b6366f1f4ddb3f33bfb8297f9df56807e844f79a99ce8228c32cdf0eae7ce318919cb3e6499a699cd906adb5157c1001e549665fa4cb6923b13cf0aad0664dddc369b550bb7f878994776b4ffd3652b73bf6771305e78a1dcdedf9851bd6d20510a0f95735c57155fbafb255a0859bd36f6c1fc3a4dff7f27ae08ad11a96ec60890e0dce76d10580af4a492b40749d609266cbb1631144403416768f542b31075cb62ade9074015cce0fd8f1b9e96142c83b8143cd89400e807fe236c9b390c8011ecac66f43e8ac0e7408bd1a427310f86a737fd1dccbe454a001a714f762bf91932526d2aa218029e52e3f5765b7177229b79ffa7f6df54a7731fae0518c1541cba87e27b4a469cbe00244e689ae0a74db94fb6f9cf1148b81257c8af1a0c54efee4ad89cbcd1ef1b24ff61279abc4417a1544e8a39c3cecbe69d30c6912a33569022205bcd6434dd071cfa0422f3bffa5b98f27d939d576f7870ee3615efb5032e1dd78f8f504b26856aa8a1a9c1df3bfb510e51d4eea14d1331bada94e59be2fe4a0b1223cd5229f8561c1788f53a3725ab5d1917b209090f3c09ff55ee9eb4224e76e1ee292c11f65620690f4d0979fd0ab0249760709f094c8600d7a79aa00f44956e72caf221a418476548b34ceb1d064b318d65f85ad94849f3e665ff231c5c9825cf1bcd457126f643dee17a496271cc1fb748be11e405da51090b165f8ed7583cd7ce190db21059a8a97151b6856e598c14f976151c3b756255899cf178aa59f71bbe996c2bd2c5b19d308d577e691333a236365ab110ac8488f076482762e35f915381e3340f097e53b9e998f3abd745ee9d922b5b28cbd3086d5726ec5076a671ce99d907715045b69374047dd8bac0b11c821917705176d232daaa795febb4eaa17f0b2865897cdbb23a3147f897c1a45ee02134a55c81f5642bd68c30625692b0fa7fbe0f0f6e2ac9ad052653acee82cb080ca948148e896158180f7067083af71a6bc46355dfbe0e9d5c9d4a9294ed9a78facfb6c1b52b50442cc804735c8997599dec8d5092caf08b6bde328eac69d35d34ae6668aa5354acddf74b780c358329bca1ffa37165358ece73caafec3dc0d617301eab92b52a823e63ec639716d5e1b6a1eee09d936510442975c826b560099a869c213cdd9649bfaaeb93b54ca4d5893da68607f6ff1212c22609d93fe6faf503e3142140a7d5a320d527218b8b5c924fa99166b3afbb1075a24945b7b987ab31cf216b510b82634e56747791a037a7197897eb33174a7bffc8e92578b86d65a8592c1aa60f08ca5368546525d93be73e2eaa7f75b55f876f7eaef5f3e92072f0ac45245edfccdc23fde33b3fcef28e7752e9bd50699d53691dc23bf7db442e9d7f3ee9c559f09ca6a85cb5613fc37151ebce4aab668769d7261e8b0e92a169d9f68ca58068a4aeba54137cd696e4538bcfd078f75ccdaae7a870106ca523320927007b1800d69d13093822b730e27a307783f34601159f44af1df0fc0f2fbaffebe1c60293882ca1c29a984182a67ac07de0ff1d57dfac30760b4afe0ab6b98e18f78f130c5fa0e91a62e1a859f3ac065d8bbe92915e5b1279623b1a01a179cec50be6ef50a133bbcf9a65045125b27df780be9bde6201cc628916adc7fbe9b7c5fd20dcaa6071dde3287b78f99ca175b2d77fd490a7fc752aad4302b80496100a01b3ecccdc4bd8e5251fc48cc327e440f2fbb8d2e44ab4ddbd9458c2e809fec8c8bcf02a1317b255d2acdd76e66d9426fb199cff8b38943e6a00144261f717ad6dc4aed63c149a397cb03b08125f78e964b76e2e6dca0266439648dea38e9ba05e59da4f75dd1b4eb0aa078711e7965f06bf89b55c74e7a59d26bc302bb131f12dae448b2ddea4b70ba78856ac1c484f7dabb68eff675e2f6e036b9eb755e129273454c934d6f8a98240ce27c757b932895dc5a2dbd26b9907a0a27e7023cbb1ef40e814cfc24775107911fcb84367af629f4cff95cba984f64fc60debac4f9f335d55e59e0cec6018d5bb835039903ecdf320efbc2397e7bc676172efa08489d31827a934c8d19d4b39ce5e4b5440a170b562a8dd51ee222adcd94b38f4f605ab44063b3532a028544e358f69018196b4fcd43aa513df9c7a4a654adc8fc6c041a128a5cadea1e9a390da4f2aa025c22ce2790e5eab93482f6f9a5c7b020cbd0ec3973b0a90c8e5a282653a6d1ae0855eaec277a3dffadd89a7854cb6ae67d449cc197a51031c445bff667fa17c9dff3cd814ccf40404c242193a2abf8612d5f4fe135b3cb9bb72ab459a50f24324b1a21e9122741c7e68b9efe5f15ad17ebaada15e9b40efdca4bbbed084f9a09b4ea53642feb4137165650d8841b7b82e48756532d42c368d431c38d26c87ac292f9f50b53491ce82f8aa16e0723dde5287cee0007f90a63dfac864c0541ff5fd104866a98605464133d9663b6fd8191a4c88600604dc992188872e2efffdb6eb77c44723693c02952a3f0115317921c67fb790a634ac83f60718f34402eb51419e401532d0a140094e2ca548dfe63aab277519ae555a3690b868f3fc5d835f43ffb8c7967b85bf6e8679fb444d436be2a9414ed9d68e5534cd8a661d6cb94bd562eee5cba4b3e64187456f42c876b9290ac3ebaf51e08e3e80737e224c893770778c632d81263e20fe09f3243dde8de3830b7c6e06ff8f6a2f12c176f7d9f03085793757ba0f279579ca78effb362a92c8fdeac16fdd58cb7c0cee63355dff07abf32cf3313b8a66fc4787d78ac268d55063f31ae90b89780538783ea8c9f710dbe59382dc52fb40449a6ae33178eaa7ed51307a79484cbb52acea62f3b23fc87cebd4609bcf851d17d84d3b19ab4d551ed5192dc1752962ad00fb85666b095f9372d77f6258436bb36e7a6634a270db15b767bf669873dd5588fa04933326dc1bdcd8c28ca74858bb94413e34527a65ef43bf02cbae26e7c2d5af8aae4fc50196a615897eea6df2af18f0b1f9fc800b1704178b968354d0e5171fbe6d699c7b56ec3df90efc73d76df00dda9d4f96f47e3b239e3712ee23c3816e2e9157bf134232cef311e5f96cf4d6980d2ca640c5795192b1a9be2c6cf07931f79178d32acea112b6b674e11b0e96461823bb70d4fca9078830ebf7fd1241e1d7c9cde719776ff4158e068af231f41e69997948b1be7d432fc2cb2e9ffb036befdcd213394c23932f2f8db9b2215f352b1aabe0873ee21ea98cd25cc9394faabac3c6d47cf46f8a4ebe90f8210dc4e06dc244bd912d7472570f09953d33182fcf85299f80237b60edc4addaa6b6bbc36adcad4d73647ce2dc9e25c9d0e0e9c3413cea3df2293767283fce435027c4ebe104cf1545b8274c4a3502e1740aa25cf39d4a3d1f4c2c36e72cd68ca3fc8b60fea5a814c4f0709b9353448d2c3f61ec6b5efd9395ad45d19f24f780759dbec6bc72fd396954910ba4826719c7f75bf404c6787ca2b45f1d37648f00b3b15fbcf96e4aa2deedba50639745b3628e8cb993a15a2ce86160d689ae6f0bf60606661fb657b16a25f4defa141d70b904f26a15428aaace2af5d5fe3eea61a86a74f367250664dc3636e5030c875936be0fc36a8919b38b7b6bd550e417385911c126347d2b9c25e0e789745a4808fd5985038937b9559976c1f64ea90b49dad89efb60476fd08cd154f6da3611682c53a11eb61c1c76ca5f38dc7eac2443e0a82e25dcec8a405cc74364289e6830f1502249514c0d2fa9b790a7afa2796d94e3850890950d2653d6b4eb9d809fb4e12bf790f332cb8430a1c832283b9b9d48c181a021bdd86282d96c489d4d4adf424a4d49740b37ffd00f6a1a8a8fef5ac9dfe70ced01468393a6", 0xf00, 0x0, &(0x7f00000000c0), 0x10) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 05:17:56 executing program 0 (fault-call:1 fault-nth:13): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket$inet(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x36, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x50000}, 0x0) r4 = shmat(0x0, &(0x7f0000dcb000/0x4000)=nil, 0x4000) shmdt(r4) shmdt(r4) [ 305.907053][T10586] FAULT_INJECTION: forcing a failure. [ 305.907053][T10586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.920281][T10586] CPU: 0 PID: 10586 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 305.928605][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.938668][T10586] Call Trace: [ 305.941973][T10586] dump_stack+0x188/0x20d [ 305.946323][T10586] should_fail.cold+0x5/0xa [ 305.950851][T10586] ? fault_create_debugfs_attr+0x140/0x140 [ 305.956663][T10586] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 305.962650][T10586] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 305.968884][T10586] __alloc_pages_nodemask+0x17a/0x810 [ 305.974274][T10586] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 305.981043][T10586] ? find_held_lock+0x2d/0x110 [ 305.985827][T10586] cache_grow_begin+0x8c/0xc10 [ 305.990598][T10586] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 305.996180][T10586] __kmalloc+0x6dc/0x7a0 [ 306.000538][T10586] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 306.006003][T10586] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 306.008474][T10585] overlayfs: upper fs does not support tmpfile. [ 306.011992][T10586] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 306.012009][T10586] n_hdlc_tty_open+0x240/0x396 [ 306.012024][T10586] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 306.012050][T10586] tty_ldisc_open.isra.0+0x9b/0x110 [ 306.027292][T10585] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.028293][T10586] tty_set_ldisc+0x2e8/0x670 [ 306.028312][T10586] tty_ioctl+0xcde/0x1440 [ 306.028330][T10586] ? tty_vhangup+0x30/0x30 [ 306.028347][T10586] ? do_vfs_ioctl+0x50c/0x1360 [ 306.028367][T10586] ? ioctl_file_clone+0x180/0x180 [ 306.052390][T10585] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 306.054792][T10586] ? __fget_files+0x32f/0x500 [ 306.054821][T10586] ? ksys_dup3+0x3c0/0x3c0 [ 306.054835][T10586] ? __sb_end_write+0x101/0x1d0 [ 306.054849][T10586] ? vfs_write+0x161/0x5d0 [ 306.054872][T10586] ? tty_vhangup+0x30/0x30 [ 306.101930][T10586] ksys_ioctl+0x11a/0x180 [ 306.106271][T10586] __x64_sys_ioctl+0x6f/0xb0 [ 306.110884][T10586] do_syscall_64+0xf6/0x7d0 [ 306.115405][T10586] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 306.121295][T10586] RIP: 0033:0x45ca59 [ 306.125191][T10586] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.144799][T10586] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.153218][T10586] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 306.161196][T10586] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 306.169176][T10586] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.177157][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 306.185486][T10586] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 05:17:56 executing program 1: bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x60000000, 0x0, 0x0, 0x0, 0xa401000000000000, 0xcc4}}], 0x210, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xa1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4) 05:17:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r3, 0x0, 0x50000000000441) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) sendto$inet(r4, &(0x7f00000000c0)="39326b307086855acaabab9c84d800917f3cc1050dc67953f7e969f9dd506e8abd6cdffab5b12eb6afef9f7445ac913f36315d7bde6ecfbcbb46b414b3943634301e8c95af965cd751adec1d5563ac7765467c00a3242a7cf69f1fc76eda51cd76258c1c350aba6a313a5fe36a0e4163504b26162a4957002014778691", 0x7d, 0x4000000, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) accept$alg(r1, 0x0, 0x0) 05:17:56 executing program 0 (fault-call:1 fault-nth:14): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) [ 306.319329][T10598] FAULT_INJECTION: forcing a failure. [ 306.319329][T10598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.332565][T10598] CPU: 1 PID: 10598 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 306.340894][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.350948][T10598] Call Trace: [ 306.354249][T10598] dump_stack+0x188/0x20d [ 306.358586][T10598] should_fail.cold+0x5/0xa [ 306.363096][T10598] ? fault_create_debugfs_attr+0x140/0x140 [ 306.368907][T10598] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 306.374895][T10598] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 306.380883][T10598] __alloc_pages_nodemask+0x17a/0x810 [ 306.386269][T10598] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 306.393031][T10598] ? find_held_lock+0x2d/0x110 [ 306.397812][T10598] cache_grow_begin+0x8c/0xc10 [ 306.402580][T10598] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 306.408045][T10598] __kmalloc+0x6dc/0x7a0 [ 306.412288][T10598] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 306.417752][T10598] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 306.423744][T10598] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 306.429041][T10598] n_hdlc_tty_open+0x240/0x396 [ 306.433811][T10598] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 306.439279][T10598] tty_ldisc_open.isra.0+0x9b/0x110 [ 306.444481][T10598] tty_set_ldisc+0x2e8/0x670 [ 306.449077][T10598] tty_ioctl+0xcde/0x1440 [ 306.453410][T10598] ? tty_vhangup+0x30/0x30 [ 306.457917][T10598] ? do_vfs_ioctl+0x50c/0x1360 [ 306.462692][T10598] ? ioctl_file_clone+0x180/0x180 [ 306.467719][T10598] ? __fget_files+0x32f/0x500 [ 306.472401][T10598] ? ksys_dup3+0x3c0/0x3c0 [ 306.476814][T10598] ? __sb_end_write+0x101/0x1d0 [ 306.481661][T10598] ? vfs_write+0x161/0x5d0 [ 306.486087][T10598] ? tty_vhangup+0x30/0x30 [ 306.490513][T10598] ksys_ioctl+0x11a/0x180 [ 306.494855][T10598] __x64_sys_ioctl+0x6f/0xb0 [ 306.499454][T10598] do_syscall_64+0xf6/0x7d0 [ 306.503963][T10598] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 306.509855][T10598] RIP: 0033:0x45ca59 [ 306.513749][T10598] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.533352][T10598] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.541859][T10598] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 [ 306.549832][T10598] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 306.557892][T10598] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.565863][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 306.573845][T10598] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 05:17:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81120, 0xc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000050715000000fb5e002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020100680012800e00010069703665727370616e0000005400028004001200080005"], 0x88}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)={0x7, 0x6, 0x3}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x202, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x32, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xd8ce96a0adb0a86e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 306.779294][T10613] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.866637][T10588] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 05:17:57 executing program 0 (fault-call:1 fault-nth:15): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 05:17:57 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x480, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'vlan0\x00', 0x8000}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x76, &(0x7f0000000140)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r6, 0x7}, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x5, 0x1, 0x2, 0x3, {0xa, 0x4e21, 0xd35, @mcast2, 0x8000}}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x4091) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c00004f3f343b357e142f5a218db73980a5d8186c43ca18eed5bc84b34c960152e9aaccf86faaddad1aacce2a79e878cfe6db939fb718e4d1d1e924c5378a1a278c02693968c74f28eb8206509794a27f92425c2dd40770a9954f7d1aaa30846c2fecc4a7c929715a091a0074d7ac6cde7685dee589bb590ae0ccdf1c16756dc131c6c3406f3dd480729af1941a723efa45c83e60e00000000000000000000000000000604fdc40f6ea90836fcc1f00f95cff12a2c90e340f0c51d67cce778ca2f1"]) [ 306.998418][T10588] ref_ctr decrement failed for inode: 0x3ef8 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004a73f8a1 [ 307.033850][T10588] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 307.042408][T10588] ref_ctr decrement failed for inode: 0x3ef8 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004a73f8a1 [ 307.067710][T10619] FAULT_INJECTION: forcing a failure. [ 307.067710][T10619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.080930][T10619] CPU: 0 PID: 10619 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 307.089271][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.099324][T10619] Call Trace: [ 307.103229][T10619] dump_stack+0x188/0x20d [ 307.107575][T10619] should_fail.cold+0x5/0xa [ 307.112092][T10619] ? fault_create_debugfs_attr+0x140/0x140 [ 307.117905][T10619] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 307.123895][T10619] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 307.129886][T10619] __alloc_pages_nodemask+0x17a/0x810 [ 307.135273][T10619] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 307.142036][T10619] ? find_held_lock+0x2d/0x110 [ 307.146817][T10619] cache_grow_begin+0x8c/0xc10 [ 307.151767][T10619] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 307.157230][T10619] __kmalloc+0x6dc/0x7a0 [ 307.161510][T10619] ? n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 307.166971][T10619] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 307.172979][T10619] n_hdlc_alloc_buf.isra.0+0x24/0xb0 [ 307.178294][T10619] n_hdlc_tty_open+0x240/0x396 [ 307.183083][T10619] ? n_hdlc_alloc_buf.isra.0+0xb0/0xb0 [ 307.188568][T10619] tty_ldisc_open.isra.0+0x9b/0x110 [ 307.193769][T10619] tty_set_ldisc+0x2e8/0x670 [ 307.198363][T10619] tty_ioctl+0xcde/0x1440 [ 307.202695][T10619] ? tty_vhangup+0x30/0x30 [ 307.207142][T10619] ? do_vfs_ioctl+0x50c/0x1360 [ 307.211904][T10619] ? ioctl_file_clone+0x180/0x180 [ 307.216919][T10619] ? __fget_files+0x32f/0x500 [ 307.221589][T10619] ? ksys_dup3+0x3c0/0x3c0 [ 307.225982][T10619] ? __sb_end_write+0x101/0x1d0 [ 307.230810][T10619] ? vfs_write+0x161/0x5d0 [ 307.235209][T10619] ? tty_vhangup+0x30/0x30 [ 307.239617][T10619] ksys_ioctl+0x11a/0x180 [ 307.243932][T10619] __x64_sys_ioctl+0x6f/0xb0 [ 307.248516][T10619] do_syscall_64+0xf6/0x7d0 [ 307.253005][T10619] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 307.258873][T10619] RIP: 0033:0x45ca59 [ 307.262748][T10619] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.282329][T10619] RSP: 002b:00007fd128a90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.290714][T10619] RAX: ffffffffffffffda RBX: 00000000004ef6a0 RCX: 000000000045ca59 05:17:57 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) [ 307.298671][T10619] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 307.306621][T10619] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 307.314571][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 307.322530][T10619] R13: 0000000000000593 R14: 00000000004c84e4 R15: 00007fd128a916d4 [ 307.461300][T10620] exFAT-fs (loop5): invalid boot record signature [ 307.467962][T10620] exFAT-fs (loop5): failed to recognize exfat type 05:17:57 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:17:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010001f0774000000dddbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002811200001c0012000b0001006d616373656300e10b00020005000a00010005000a0005403d0000000000000008000a0009d3"], 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x40080) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000000)) 05:17:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)=0x100000000) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0192070000fffffffffffffa00009f14200100"}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000070053ef", 0x3a, 0x4000000000400}], 0x4810, 0x0) [ 307.650730][T10639] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 307.839238][T10649] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:17:58 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) [ 308.070101][T10653] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:17:58 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000080)=0xd) [ 308.282637][T10639] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 05:17:58 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000080)=0xd) 05:17:58 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x2405, &(0x7f0000000080)=0xd) 05:17:58 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000080)=0xd) 05:17:59 executing program 5: getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x1000f8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r4, 0x89f8, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/171) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88000120}, 0xc, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="44000000a7c842f9a276c3b838d81b603b78eeac3a383bb956d94c47c495e10093a0ed62a3a9f989ff5da41ec93cadc66b", @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf250600000005002d000000000008003c000800000005002d0001000000060028000300000005002d000000000008000b001a000000"], 0x44}}, 0x4008014) write$nbd(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x2b) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000240)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000001400)=0x4) dup3(r1, r2, 0x80000) dup2(r0, r3) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xfffff000}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0xffffffdd) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) 05:17:59 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000080)=0xd) 05:17:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff3900020200000000100f0007e1000c080017001605bf1e", 0x24) close(r2) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00!', 0xffffff82) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x10000017e) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ff5d, 0x0) 05:17:59 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:00 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:00 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5402, &(0x7f0000000080)=0xd) 05:18:00 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000010a0ff0100000000000800010063627300030000000055fe00000000000000089900"/48], 0x48}}, 0x0) [ 309.833267][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:18:00 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:00 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000080)=0xd) [ 309.914801][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:18:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x6d, &(0x7f0000000200)="893c8aa1eeea37088955be3f252f30ef9e1a8bdb1796b66cb3c324324388c6e08c0ca7f50d586b3efcfcc38e57d3a8beb166ca900ff484194b5b2bfb4c3286c0ba7b5787795cce42971497ba2991a455219e019a767522bced580eb8bd3e795db293f5468f548716b3d724f939") syz_usb_control_io$hid(r0, 0x0, 0x0) 05:18:00 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000080)=0xd) 05:18:00 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000080)=0xd) 05:18:00 executing program 4: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x9, 0xd, 0x14, "4bbe7de89b6b893531082c6660828279b7acb36ebc9e382d19c20a7aafbe9a39ceb62e854021a442f801b4b3853ff6db9317ac1e45f54228ca78507e282c5d57", "fe809848d57b37fca5cc2dec3cb9779c7ace1463e25dfc7f9c74ada11033d7a5a1212a9eff120a9f72122424fb3ce7fbf724d40f31f85987933ba59366937c07", "07c60e9cb7db4d4181f78f68f661b453777a39ff8571582ea827ed03f23704b2", [0x2, 0x8]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000180)=[r3]) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r9, 0x80047453, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ce4ffffff0001000000000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000ec079de5987ff8ea4213f0ec4795499176b80dc94513214944258178fd11b0ed1927eb3e453b8219c40752789114eda78c38663543f35a11ed8e940069c2bec7d6e3ed08e8d10a1850156cd8f3b1ee0e6edf18edf9dd49f05ac884395f32074f52b08740d9c9af2a6adbc712d9c836a024584d2d2b3228dd2cd3584ae79190d08fbb9ef1ee99b5b9553c6d4abcad", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000002c000000000000000100070001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="40a5fe16c33cebfda2040b7794588638c235dcb5171fb529a2a89bc82ab7a7302d818525bd4f867b2b3e6bb2957da25dc2674047e1fbf174a3a7d76925817fdcaa4c820ba0c0ed163ffcf0fb1502a4ca96f24639acdefeccd0a73ba1288bbe9d7a690fccd2805bc10a35d86e8f32af9a0ad5ae5e3cbfbbd34cc4801736b9a0bf52ffffe4d435"], 0x160, 0x8844}, 0x4008800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00'}) 05:18:00 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000080)=0xd) [ 310.378841][ T2586] usb 2-1: new high-speed USB device number 2 using dummy_hcd 05:18:00 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xd) 05:18:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:01 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 05:18:01 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000080)=0xd) 05:18:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0xffffffff, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @random="9700", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @remote, @private0={0xfc, 0x0, [], 0x1}, @local, @private1}}}}, 0x0) [ 310.758832][ T2586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.778198][ T2586] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.798471][ T2586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.820596][ T2586] usb 2-1: config 0 descriptor?? 05:18:01 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000080)=0xd) [ 311.312262][ T2586] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 311.351438][ T2586] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input7 [ 311.485635][ T2586] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 05:18:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x401, 0x7, 0x1, 0x4}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:18:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4faf08fe617b0703449ec4345fa5ce1020a836956a07d3513d42a70959fa667b004500792e78630b1f48198c06cf1182ddf2d48ad51492951a28ce7e7052ef99dc1d3e0b14bdf96cc583c83aeef7d6fc96270df733c8eb5d9a49aa2d87e5", 0xffffffffffffff6a}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) 05:18:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x9e0000, 0xff, 0x2, r1, 0x0, &(0x7f0000000100)={0x990907, 0x40, [], @p_u32=&(0x7f0000000000)=0x5}}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) fallocate(r1, 0x2, 0x289, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x4}, 0x20) r5 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376862168fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7", 0x2a}], 0x1}, 0x900) 05:18:03 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000080)=0xd) 05:18:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:03 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 313.070228][ T17] usb 2-1: USB disconnect, device number 2 05:18:03 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000080)=0xd) 05:18:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={@any=[0x2]}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 05:18:03 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000080)=0xd) [ 313.437956][T10814] IPVS: ftp: loaded support on port[0] = 21 05:18:03 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x210240, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0xf, 0x20, 0x9, 0x40, 0x0, @multicast}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x8, 0x2, @dev={[], 0x38}}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000140)=""/4096, &(0x7f0000000000)=0x1000) 05:18:03 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000080)=0xd) [ 313.915357][T10814] IPVS: ftp: loaded support on port[0] = 21 05:18:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x361000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private0={0xfc, 0x0, [0x7]}}, {0xa, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), 0xffffffffffffffff, 0xfffffffb}}, 0x18) write$cgroup_int(r5, &(0x7f0000000180)=0x2, 0x12) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000240)) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="b3c40000000086dd60083ff200021a2300ac4624075661142f00fe8000000000000000000000000000bbfe8005000000000000000000000000aa000088bea8000000000000"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x5, 0xfffe}], 0x1) 05:18:04 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000080)=0xd) 05:18:04 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xfffffffffffffe98) read(r0, &(0x7f0000000000)=""/139, 0x1000000be) preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x5) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x0, @addr=0x100}, 0x8, 0x100, 0xd1df}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 05:18:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) bind$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x2, 0x6, 0x7, 0x6, 0x10, 0x1d1}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) [ 314.068742][ T21] tipc: TX() has been purged, node left! 05:18:04 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)=0xd) [ 314.233599][T10879] vivid-002: kernel_thread() failed [ 314.368743][T10784] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 314.376890][T10784] ref_ctr decrement failed for inode: 0x3f24 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e279a0d0 [ 314.410026][T10784] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 314.436598][T10784] ref_ctr decrement failed for inode: 0x3f24 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e279a0d0 05:18:04 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:04 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)=0xd) 05:18:04 executing program 1: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x216805, &(0x7f0000000040)={[{@quota_on='quota=on'}]}) 05:18:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x81) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) bind$ax25(r4, &(0x7f0000000040)={{0x3, @default, 0x3}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 05:18:04 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:04 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:05 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000080)=0xd) 05:18:05 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000080)=0xd) 05:18:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x0, 0x4, 0x3ff, 0x1, 0xa6}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r3 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r3, &(0x7f0000000000)="2e1dea298000d9", 0xfdfe, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000140)=0x7) sendto$unix(r4, 0x0, 0x0, 0x20000050, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e3}, 0x6e) 05:18:05 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000080)=0xd) 05:18:05 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x6, 0x0, 0xfff, 0x7, 0x6}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 05:18:05 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000080)=0xd) [ 315.158467][T10928] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! [ 315.408365][T10907] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 315.416443][T10907] ref_ctr decrement failed for inode: 0x3f30 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000969601a0 [ 315.460502][T10907] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 315.482662][T10907] ref_ctr decrement failed for inode: 0x3f30 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000969601a0 05:18:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) [ 315.798693][T10916] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 315.806823][T10916] ref_ctr decrement failed for inode: 0x3f35 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000ca793eb9 [ 315.821936][T10916] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 315.831424][T10916] ref_ctr decrement failed for inode: 0x3f35 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000ca793eb9 05:18:06 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000080)=0xd) 05:18:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) io_uring_setup(0x634, &(0x7f0000000240)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x200, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x2202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) listen(r4, 0x9) 05:18:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) [ 316.675666][T10943] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 316.695507][T10943] ref_ctr decrement failed for inode: 0x3df4 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008c000e52 [ 316.716361][T10943] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 316.725290][T10943] ref_ctr decrement failed for inode: 0x3df4 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008c000e52 05:18:07 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000010e65bc9b610e5026251b8e7eae023a671d1", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/96, 0x60) truncate(&(0x7f0000000500)='./file0\x00', 0x3d0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000380)={0x2, 0x49, &(0x7f0000000600)="b7d6782c0ec760e4eb9d16cbc1386c17c15226f1c0e3f925dfc617fc7ce7147f97d1af533a47d4fde6da4d855e4eb1df02e2bb7ce1f5b659664b4357cb1566d3c5b674b59d3cfb27f4eb62f6c0c076390b2338a62e183f4e13f6248d6e8d78c081bf34c2dfcd54d7dddab76f99c418d7fbc98506e3db641efb7577af1d8c69ff17acb759ab494c66", {0x60, 0x10001, 0x3032344d, 0x6, 0x40, 0x6, 0x9, 0x9}}) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, [], 0x3, 0x7}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000000000a6b25c03", @ANYRES32=r8, @ANYBLOB="0143010000000000"], 0x20}}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x20) 05:18:07 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)=0xd) 05:18:07 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209900d08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0xf49}, {&(0x7f0000000840)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x1a0}, 0x2000a86d) 05:18:07 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:07 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 317.536131][T10945] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 317.541437][T10968] ttyprintk ttyprintk: tty_port_close_start: tty->count = 1 port count = 3 [ 317.544505][T10945] ref_ctr decrement failed for inode: 0x3f2c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004a73f8a1 [ 317.552723][ C0] [ 317.552728][ C0] ====================================================== [ 317.552733][ C0] WARNING: possible circular locking dependency detected [ 317.552736][ C0] 5.7.0-syzkaller #0 Not tainted [ 317.552741][ C0] ------------------------------------------------------ [ 317.552746][ C0] syz-executor.0/10968 is trying to acquire lock: [ 317.552749][ C0] ffffffff899b2680 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x425/0x730 [ 317.552762][ C0] [ 317.552766][ C0] but task is already holding lock: [ 317.552769][ C0] ffffffff8d1d94b8 (&port->lock#2){-.-.}-{2:2}, at: tty_port_close_start.part.0+0x28/0x550 [ 317.552783][ C0] [ 317.552786][ C0] which lock already depends on the new lock. [ 317.552788][ C0] [ 317.552790][ C0] [ 317.552795][ C0] the existing dependency chain (in reverse order) is: [ 317.552797][ C0] [ 317.552798][ C0] -> #2 (&port->lock#2){-.-.}-{2:2}: [ 317.552813][ C0] _raw_spin_lock_irqsave+0x8c/0xbf [ 317.552816][ C0] tty_port_tty_get+0x1f/0x100 [ 317.552821][ C0] tty_port_default_wakeup+0x11/0x40 [ 317.552825][ C0] serial8250_tx_chars+0x48f/0xa60 [ 317.552840][ C0] serial8250_handle_irq.part.0+0x328/0x3d0 [ 317.552848][ C0] serial8250_default_handle_irq+0xb5/0x140 [ 317.552852][ C0] serial8250_interrupt+0xe6/0x190 [ 317.552856][ C0] __handle_irq_event_percpu+0x22e/0xa50 [ 317.552860][ C0] handle_irq_event_percpu+0x76/0x160 [ 317.552863][ C0] handle_irq_event+0xa2/0x12d [ 317.552867][ C0] handle_edge_irq+0x24b/0x8c0 [ 317.552870][ C0] do_IRQ+0xd5/0x270 [ 317.552873][ C0] ret_from_intr+0x0/0x2b [ 317.552878][ C0] _raw_spin_unlock_irqrestore+0x8c/0xe0 05:18:08 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000080)=0xd) [ 317.552881][ C0] uart_write+0x3a7/0x6f0 [ 317.552885][ C0] do_output_char+0x5dd/0x850 [ 317.552888][ C0] n_tty_write+0x49e/0xf90 [ 317.552891][ C0] tty_write+0x495/0x800 [ 317.552895][ C0] redirected_tty_write+0xaa/0xb0 [ 317.552899][ C0] do_iter_write+0x486/0x600 [ 317.552902][ C0] vfs_writev+0x1b3/0x2f0 [ 317.552905][ C0] do_writev+0x139/0x300 [ 317.552909][ C0] do_syscall_64+0xf6/0x7d0 [ 317.552913][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 05:18:08 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)=0xd) [ 317.552915][ C0] [ 317.552917][ C0] -> #1 (&port->lock){-.-.}-{2:2}: [ 317.552929][ C0] _raw_spin_lock_irqsave+0x8c/0xbf [ 317.552933][ C0] serial8250_console_write+0x20d/0xb00 [ 317.552937][ C0] console_unlock+0xac7/0xf00 [ 317.552940][ C0] vprintk_emit+0x2c4/0x730 [ 317.552944][ C0] vprintk_func+0x8f/0x1a6 [ 317.552947][ C0] printk+0xba/0xed [ 317.552950][ C0] register_console+0x55f/0x7e0 [ 317.552954][ C0] univ8250_console_init+0x3a/0x46 [ 317.552957][ C0] console_init+0x43f/0x646 [ 317.552961][ C0] start_kernel+0x76e/0x9fb [ 317.552964][ C0] secondary_startup_64+0xa4/0xb0 [ 317.552966][ C0] [ 317.552968][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 317.552980][ C0] __lock_acquire+0x2a9a/0x48a0 [ 317.552984][ C0] lock_acquire+0x1f2/0x8f0 [ 317.552987][ C0] vprintk_emit+0x462/0x730 [ 317.552991][ C0] vprintk_func+0x8f/0x1a6 [ 317.552994][ C0] printk+0xba/0xed [ 317.552998][ C0] tty_port_close_start.part.0+0x4f7/0x550 [ 317.553001][ C0] tty_port_close+0x46/0xf0 [ 317.553005][ C0] tty_release+0x3b9/0xe90 [ 317.553008][ C0] __fput+0x33e/0x880 [ 317.553011][ C0] task_work_run+0xf4/0x1b0 [ 317.553015][ C0] exit_to_usermode_loop+0x2fa/0x360 [ 317.553019][ C0] do_syscall_64+0x6b1/0x7d0 [ 317.553023][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 317.553025][ C0] [ 317.553029][ C0] other info that might help us debug this: [ 317.553031][ C0] [ 317.553034][ C0] Chain exists of: [ 317.553036][ C0] console_owner --> &port->lock --> &port->lock#2 [ 317.553052][ C0] [ 317.553056][ C0] Possible unsafe locking scenario: [ 317.553058][ C0] [ 317.553061][ C0] CPU0 CPU1 [ 317.553065][ C0] ---- ---- [ 317.553067][ C0] lock(&port->lock#2); [ 317.553077][ C0] lock(&port->lock); [ 317.553085][ C0] lock(&port->lock#2); [ 317.553093][ C0] lock(console_owner); [ 317.553099][ C0] [ 317.553102][ C0] *** DEADLOCK *** [ 317.553104][ C0] [ 317.553107][ C0] 2 locks held by syz-executor.0/10968: [ 317.553109][ C0] #0: ffff8880940c81c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 317.553124][ C0] #1: ffffffff8d1d94b8 (&port->lock#2){-.-.}-{2:2}, at: tty_port_close_start.part.0+0x28/0x550 [ 317.553141][ C0] [ 317.553143][ C0] stack backtrace: [ 317.553149][ C0] CPU: 0 PID: 10968 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 317.553155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.553158][ C0] Call Trace: [ 317.553161][ C0] dump_stack+0x188/0x20d [ 317.553164][ C0] check_noncircular+0x32e/0x3e0 [ 317.553168][ C0] ? print_circular_bug.isra.0+0x3a0/0x3a0 [ 317.553171][ C0] ? mark_lock+0x11f/0xdd0 [ 317.553175][ C0] ? find_first_zero_bit+0x94/0xb0 [ 317.553178][ C0] __lock_acquire+0x2a9a/0x48a0 [ 317.553182][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 317.553186][ C0] ? find_held_lock+0x2d/0x110 [ 317.553189][ C0] lock_acquire+0x1f2/0x8f0 [ 317.553191][ C0] ? vprintk_emit+0x425/0x730 [ 317.553194][ C0] ? lock_release+0x800/0x800 [ 317.553197][ C0] ? lock_downgrade+0x840/0x840 [ 317.553201][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 317.553204][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 317.553208][ C0] ? trace_hardirqs_off+0x50/0x220 [ 317.553215][ C0] ? vprintk_emit+0x2a7/0x730 [ 317.553218][ C0] vprintk_emit+0x462/0x730 [ 317.553221][ C0] ? vprintk_emit+0x425/0x730 [ 317.553224][ C0] vprintk_func+0x8f/0x1a6 [ 317.553227][ C0] printk+0xba/0xed [ 317.553230][ C0] ? log_store.cold+0x16/0x16 [ 317.553234][ C0] ? mark_held_locks+0x9f/0xe0 [ 317.553238][ C0] tty_port_close_start.part.0+0x4f7/0x550 [ 317.553241][ C0] ? do_tty_hangup+0x30/0x30 [ 317.553244][ C0] tty_port_close+0x46/0xf0 [ 317.553247][ C0] ? tpk_write+0x340/0x340 [ 317.553250][ C0] tty_release+0x3b9/0xe90 [ 317.553253][ C0] ? do_tty_hangup+0x30/0x30 [ 317.553256][ C0] __fput+0x33e/0x880 [ 317.553259][ C0] task_work_run+0xf4/0x1b0 [ 317.553263][ C0] exit_to_usermode_loop+0x2fa/0x360 [ 317.553266][ C0] do_syscall_64+0x6b1/0x7d0 [ 317.553271][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 317.553273][ C0] RIP: 0033:0x416651 [ 317.553285][ C0] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 317.553289][ C0] RSP: 002b:00007fff161d7b90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 317.553298][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416651 [ 317.553303][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 0000000000000003 [ 317.553309][ C0] RBP: 0000000000000000 R08: 0000000000790148 R09: 0000000000000000 [ 317.553314][ C0] R10: 00007fff161d7c70 R11: 0000000000000293 R12: 0000000000790150 [ 317.553319][ C0] R13: 0000000000000000 R14: ffffffffffffffff R15: 000000000078bf0c 05:18:08 executing program 1: syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2a40, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000180)=0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f00000001c0)={0x4, 0x0, [0x3, 0x200, 0x8, 0x0, 0x7, 0x1, 0x1, 0x2]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x1, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000)="4634d6a543d2ed46f2aeabba09e5b953c352021f99d5b2107d49701af750cce35088a223a5ca3657b7cfef94905725feb831ab245ff1fa03c8187704c7f9bd98b5ce09075f5f5a0d6274a856e9da894e5d4e67e773907366ffb459a5e7675b21f6deb4c076e154df33e786caf5fbe28a4986d82a50e66cba1e6764b7a4a5a30d4ab3ed27b75a3d71add55a39c7b97433003240c653a5164b754a4f76cfab2ec27130aa42285bc706cd496b4ee7acf341176fa75a4cccc53817061841b7ab1a73c230a00eb59cc381f772e60bd075803e1d75d71ada89cf", &(0x7f0000000100)="9607aae33f316375ff8a8a23"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 317.580176][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.683679][T10945] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 318.306009][T10945] ref_ctr decrement failed for inode: 0x3f2c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004a73f8a1 [ 318.319611][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:18:08 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x2, [[0x6, 0x1, 0x401, 0x2, 0x0, 0x8, 0x0, 0x8], [0x0, 0x1000, 0x565, 0x0, 0x7, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100]], [], [{0x0, 0xfffffffa, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x9c05, 0x3f02bcba, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}, {0xd6, 0x8}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}], [], 0xfff}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) 05:18:08 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000080)=0xd) 05:18:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:18:08 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') [ 318.502212][T10997] ttyprintk ttyprintk: tty_port_close_start: tty->count = 1 port count = 2 05:18:08 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000080)=0xd) [ 318.701445][T11006] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 318.711520][T11006] ref_ctr decrement failed for inode: 0x3f3e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000091d856f [ 318.723998][T11006] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 05:18:09 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x2, [[0x6, 0x1, 0x401, 0x2, 0x0, 0x8, 0x0, 0x8], [0x0, 0x1000, 0x565, 0x0, 0x7, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100]], [], [{0x0, 0xfffffffa, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x9c05, 0x3f02bcba, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}, {0xd6, 0x8}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}], [], 0xfff}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) 05:18:09 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000080)=0xd) [ 318.747400][ T28] audit: type=1800 audit(1592457488.976:26): pid=10999 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15825 res=0 [ 318.766694][T11006] ref_ctr decrement failed for inode: 0x3f3e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000091d856f [ 318.845481][ T301] tipc: TX() has been purged, node left! 05:18:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:09 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000080)=0xd) 05:18:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:18:09 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000080)=0xd) 05:18:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:18:09 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x6364, &(0x7f0000000080)=0xd) 05:18:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:18:09 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:09 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x2, [[0x6, 0x1, 0x401, 0x2, 0x0, 0x8, 0x0, 0x8], [0x0, 0x1000, 0x565, 0x0, 0x7, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100]], [], [{0x0, 0xfffffffa, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x9c05, 0x3f02bcba, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}, {0xd6, 0x8}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}], [], 0xfff}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) 05:18:09 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8906, &(0x7f0000000080)=0xd) 05:18:09 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8912, &(0x7f0000000080)=0xd) 05:18:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) [ 319.828744][T11063] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 319.919614][T11063] ref_ctr decrement failed for inode: 0x3f2b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007dff32b3 [ 319.940860][T11063] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 05:18:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:10 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8914, &(0x7f0000000080)=0xd) 05:18:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:18:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 05:18:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x2, [[0x6, 0x1, 0x401, 0x2, 0x0, 0x8, 0x0, 0x8], [0x0, 0x1000, 0x565, 0x0, 0x7, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100]], [], [{0x0, 0xfffffffa, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x9c05, 0x3f02bcba, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}, {0xd6, 0x8}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}], [], 0xfff}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) [ 320.062355][T11063] ref_ctr decrement failed for inode: 0x3f2b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007dff32b3 05:18:10 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8933, &(0x7f0000000080)=0xd) 05:18:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 05:18:10 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:10 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0xae01, &(0x7f0000000080)=0xd) 05:18:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:18:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x2, [[0x6, 0x1, 0x401, 0x2, 0x0, 0x8, 0x0, 0x8], [0x0, 0x1000, 0x565, 0x0, 0x7, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100]], [], [{0x0, 0xfffffffa, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x9c05, 0x3f02bcba, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}, {0xd6, 0x8}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}], [], 0xfff}) 05:18:10 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0xae41, &(0x7f0000000080)=0xd) 05:18:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r2) 05:18:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0xae80, &(0x7f0000000080)=0xd) 05:18:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) 05:18:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) dup(r8) 05:18:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 05:18:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0xae9a, &(0x7f0000000080)=0xd) 05:18:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x40045431, &(0x7f0000000080)=0xd) [ 321.180039][T11147] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 321.192700][T11147] ref_ctr decrement failed for inode: 0x3dd1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007f56616f [ 321.253800][T11147] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 321.288187][T11147] ref_ctr decrement failed for inode: 0x3dd1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007f56616f 05:18:11 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r4) close(r3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 05:18:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) dup(r8) 05:18:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x400454ca, &(0x7f0000000080)=0xd) 05:18:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r5, 0xa9557000) 05:18:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r2) 05:18:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000080)=0xd) 05:18:11 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x40084503, &(0x7f0000000080)=0xd) 05:18:12 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4008ae90, &(0x7f0000000080)=0xd) 05:18:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 05:18:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 05:18:12 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4010ae68, &(0x7f0000000080)=0xd) [ 322.127713][T11208] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 322.135898][T11208] ref_ctr decrement failed for inode: 0x3f42 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000010ae8547 [ 322.162416][T11208] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 322.173493][T11208] ref_ctr decrement failed for inode: 0x3f42 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000010ae8547 05:18:12 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x40186366, &(0x7f0000000080)=0xd) 05:18:12 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) 05:18:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 05:18:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 05:18:12 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() getpid() syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r2) 05:18:12 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)=0xd) [ 322.430889][T11280] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 322.454726][T11280] ref_ctr decrement failed for inode: 0x3f47 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000045e336e1 05:18:12 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4020ae46, &(0x7f0000000080)=0xd) [ 322.485178][T11280] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 322.496677][T11280] ref_ctr decrement failed for inode: 0x3f47 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000045e336e1 05:18:12 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() getpid() syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 05:18:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) ioctl$TUNSETGROUP(r3, 0x400454ce, r7) 05:18:12 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4090ae82, &(0x7f0000000080)=0xd) 05:18:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getscheduler(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) 05:18:13 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4138ae84, &(0x7f0000000080)=0xd) [ 322.836690][T11311] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 322.856939][T11311] ref_ctr decrement failed for inode: 0x3f48 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004c5de95a 05:18:13 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x4400ae8f, &(0x7f0000000080)=0xd) 05:18:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r4, r6, r7) 05:18:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) socket$packet(0x11, 0x2, 0x300) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) [ 322.887819][T11311] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 322.904073][T11311] ref_ctr decrement failed for inode: 0x3f48 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004c5de95a 05:18:13 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb55ed7af4b2c34d0e866e830e3800bb6f06c257abcdaee5bd8e052219e6587946781900385a7df0b9119e4a78dca4817b163e46a0002ddd1c136000"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(r3) 05:18:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:13 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x80045430, &(0x7f0000000080)=0xd) 05:18:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 05:18:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x111) ftruncate(r5, 0x208200) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) 05:18:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 05:18:13 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000080)=0xd) [ 323.407983][T11351] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 323.426790][T11351] ref_ctr decrement failed for inode: 0x3e22 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000df951465 05:18:13 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000080)=0xd) [ 323.456058][T11351] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 323.479716][T11351] ref_ctr decrement failed for inode: 0x3e22 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000df951465 05:18:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) socket$packet(0x11, 0x2, 0x300) 05:18:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/301], &(0x7f00000003c0)={0x0, 0x3, [0x0, 0x663, 0xa48, 0x719]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r3) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 05:18:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8a6da3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfa7183ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c6f1a379c00d2fb2f9cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31dcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb0"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=""/171, 0xab}], 0x1, 0x4000000b6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 05:18:13 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x80047453, &(0x7f0000000080)=0xd) [ 323.659799][T11350] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 323.677882][T11350] ref_ctr decrement failed for inode: 0x3e21 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d48e805d [ 323.744693][T11350] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 323.764907][T11350] ref_ctr decrement failed for inode: 0x3e21 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d48e805d [ 323.891072][T11381] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 323.899828][T11381] ref_ctr decrement failed for inode: 0x3f26 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000006e8c5a0 [ 323.912346][T11381] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 323.920477][T11381] ref_ctr decrement failed for inode: 0x3f26 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000006e8c5a0 05:18:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_emit_ethernet(0xaa, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08067b883ba376472559a39eea68979a2bf0f302455a02c95a51542cfcf31cc05d47f6c1698411b5193b910a0fa9818b680130768373e0219b94f7d2481c20c1d800e607df3eefb8508ff770f17e91fe7f307930ad9b59c4ff1e6abefb4ee809000000000000008bc9703011ca24e0ed6e9be7c56045ed6a4e8f14d12d11f44da3ad530adfbbebfd45663aa45a63667aeda1f052ecec3ddb7dd99d3fd69dfa726835ebd3a5a2a10a6041e3e998cbec83bfa2eaa41480b9c31b9a07964e2d28715f18b1047447174f01b9baf70dddfc2e760278e73a4e714eb0adbbc9cb