up.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1109.709808][T14050] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1109.744928][T14045] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:42 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000f00000001c00000019080001000000"], 0x24}}, 0x0) [ 1109.781258][T14045] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000a19073f7 08:43:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$sock(r0, &(0x7f00000017c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x4, @mcast2, 0x3, 0x1}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000000)="d6422bf5e363ffa584be921963d13554d2e55eb802a8a35654bc80b9a4ff7712e55ac0fe85e458600f6f09", 0x2b}, {&(0x7f0000000080)="c044c2435eaf5099aa", 0x9}, {&(0x7f0000000240)="ebefa290a2b8ed65f8ed5214ab5381eed06d771804fb90b30bb4b63f191426aa4bfc1251a6ea51f820e624bd064f3c1e182e233de03a03b9dd4f8cd8031dd5b6497cd6ff9aaa2496db5e05f0d05a0252b82b68a0949022d1c1015d310783d47041f74e727924c35e39bc9d499e48436e2df5aac34bf921aada34c84042c2d95c8de6ded27b6fef56f64873c37cf284c933d654e205ab81cb19e431b9221d2d0ca92a2b4291a85e34e2320d1181ecb41d2611ed50207b7db69fb559", 0xbb}, {&(0x7f0000000300)="98d5fee44d2f118720b610f06a41c4f84ad4d1309b7286c3315c3dfd40f9df3ede0fa81b59493f984f69be6bffc665682c44f80efe56ef4e93475b3327cab19a2eda1e746629cef016b24a5fe71e71b38a2116feec32339203bf5dc1bc440e7908dbea567247efaa31f17d168a284ff47b68037cd2a18b188eacac2432aa7d01d01e6451eca132012ad8d21bf41be4139880ecafe1729adb0ea0d5fcc96f0dba88d4bef24a8fbf57977e93ff8811e9fac7cfd2f4c01776515721f4c5a9d1ad28e84b4087c9c88630d1813a683437916f383b6b56d946eb0ce31edf51015d4875b78d3db7", 0xe4}, {&(0x7f0000000400)="3a2f05ea2b79b2aa297d9a0c2b56ebbdd3ab197f49ca0132390fcefe986752e6996140498ef6f728eba4bd65a2312a29862b708d680e6d26041e9c8f8f2b0389b3bbac556df65573f13e041f80687083e5502993", 0x54}, {&(0x7f0000000480)="6fed7fa709180e1ebc2aaca4db9948a83328b01d1c804d316f3e012f794bc45d18538ebf6f4353075d0ad52fb54025bcea92379af44e28a79bc29090aa7fbf2e7ea3b0fb22a77b4ab371734fab31098a0a8d70da4dfc5bade5f444888823b49e50f9ce846f8f3f842b8740068d281174c28ea85842350b4e8a4f0aa232493ea1260fa413cce4466702c74978071983af21e947017963c4a90289e9aed0c7413755672682b8415573f00fa2be7ce442d2b74bc86fb9a657bcfb770bf006475c80367f9abe915b9dd0108031e4d51d93694a75a73dc3a9", 0xd6}, {&(0x7f0000000580)="07433b7511ce39ba024831a44375ad9918dc21b9002c8b60abce5273e47230ae0b7fd49187271972a0fde82e4ac2f919e21a335ca1e02cc3230aa6b9f7692e993ae14b5a35bf638cccfdaf", 0x4b}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="6047f9aeef7b447ed86220f45e01b64b30c31c407cc04107c4162ee356ea11f4c38ea4b87c7b3c5bb654c08e22705a204b80164c3351c2909840a4fb098d6a991d75c550d775f52988267110795c3dbb0746d63ba92ed44b0c27647fb27997291d2357657f0fc3c9b67b3b0f8249066abb186c7a42423aa47ce370f00fbbe1cb169c7d99feb5a53f", 0x88}], 0x9, &(0x7f0000000100)}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1109.900322][T14045] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1109.936375][T14045] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000a19073f7 08:43:43 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000300001c00000019080001000000"], 0x24}}, 0x0) [ 1110.106433][ T37] audit: type=1804 audit(1629276223.183:1422): pid=14066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1861/cgroup.controllers" dev="sda1" ino=14817 res=1 errno=0 08:43:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x78, &(0x7f0000000000)={r4}, 0x8) 08:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x100000000000000) [ 1110.180026][T14078] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1110.289909][T14086] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:43 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000500001c00000019080001000000"], 0x24}}, 0x0) [ 1110.394630][T14084] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1110.421977][T14084] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f6e04f03 08:43:43 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000640), 0x0, 0xd9b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000005", @ANYRES16=r2, @ANYRES16=r4, @ANYBLOB="16d08748b43e11c07f5e19c0b7acb731", @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x4008000) [ 1110.492640][T14084] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1110.545954][T14084] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f6e04f03 08:43:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x200000000000000) 08:43:43 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000600001c00000019080001000000"], 0x24}}, 0x0) [ 1110.718033][T14104] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) [ 1110.782467][T14110] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1110.903251][ T37] audit: type=1804 audit(1629276223.983:1423): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1862/cgroup.controllers" dev="sda1" ino=14788 res=1 errno=0 08:43:44 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1110.975083][T14115] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:44 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000700001c00000019080001000000"], 0x24}}, 0x0) [ 1111.014437][T14115] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000077f3571f 08:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x800, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}}, 0x0) [ 1111.094744][T14115] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1111.129723][T14115] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000077f3571f 08:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x300000000000000) [ 1111.212295][T14131] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) [ 1111.301546][T14138] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:44 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x3000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:44 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000900001c00000019080001000000"], 0x24}}, 0x0) 08:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4a2, 0x21}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7f}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x80}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x240800c1) 08:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x400000000000000) [ 1111.549952][T14148] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1111.568810][T14148] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000000ec2dbc0 [ 1111.655856][T14148] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1111.666976][T14157] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1111.690378][ T37] audit: type=1804 audit(1629276224.774:1424): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1863/cgroup.controllers" dev="sda1" ino=14813 res=1 errno=0 [ 1111.692999][T14148] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000000ec2dbc0 [ 1111.757339][T14162] __nla_validate_parse: 16 callbacks suppressed [ 1111.781350][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1111.811768][T14165] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1111.863224][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1111.895041][T14148] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:45 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1111.935503][T14148] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000000ec2dbc0 08:43:45 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000a00001c00000019080001000000"], 0x24}}, 0x0) [ 1111.994463][T14148] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1112.038738][T14148] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000000ec2dbc0 08:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x500000000000000) 08:43:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7c, &(0x7f0000000000)={r4}, 0x8) 08:43:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1112.244733][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x684, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfe, 0x4c}}}}, [@NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x3, 0xb, 0x16, 0x12, 0x24, 0x12, 0x6, 0x24, 0x0, 0x12, 0x12, 0x1, 0xb, 0x4, 0x6, 0x30, 0x77, 0xc, 0x30, 0x1b, 0x6c, 0x48, 0x48, 0x6, 0x5, 0x2]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x0, 0x48, 0x16, 0x4, 0x41855399ba6dd4f9, 0x1, 0x5, 0x1b, 0x60, 0x60, 0x9, 0x3, 0x6c, 0xc, 0x5, 0xb, 0x5, 0x9, 0x2, 0x3, 0x0, 0x60, 0x6, 0x5]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x3, 0x16, 0x3e, 0x2, 0xb]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x9}, {0x5, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x5}, {0x5, 0x8}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x1b, 0xc, 0x16, 0x60, 0x18, 0x2, 0x48, 0xb, 0x3, 0x6, 0x60, 0x60, 0x9, 0x1, 0x9, 0x1b, 0x60]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x24, 0x6, 0x48, 0x4, 0x4, 0x6c, 0xc, 0x3, 0x60, 0x2, 0x12, 0x24, 0xc, 0x48, 0x2, 0x45, 0x1, 0x2]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x5]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0x3}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x5}, {0x6}, {0x2, 0x2}, {0x4, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0xff, 0xf, 0x0, 0x1, 0x20, 0xfffe, 0xfffc]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x7}, {0x4, 0x3}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x4}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0xa}, {0x7}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x2, 0xa}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xffff, 0x736d, 0x1f, 0x7fff, 0x3, 0x4, 0xfffe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0xdf8f462304b65cc3}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x4, 0x48, 0x12, 0x6c, 0xb, 0x30, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0xa}, {0x4}, {0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {}, {0x3, 0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x4, 0x9}, {0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x800, 0x5c7a, 0x0, 0x1, 0x40, 0x401, 0xff43]}}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x5, 0x0, 0xfffe, 0x7, 0x3919, 0x260]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x24, 0x48, 0x6, 0x6, 0x9, 0x3, 0x4, 0x30, 0x31, 0x24, 0x16, 0x60, 0x6c, 0x5, 0x5, 0x3, 0x12]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x2}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x7fff, 0x9, 0xb905, 0x1, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x3, 0xc, 0x6, 0x6c, 0x1b, 0x48, 0x33]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x6}, {0x6, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x6}, {0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0xa}, {0x5, 0x7}, {0x5, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x2, 0x6, 0x4, 0x4, 0x8, 0x4]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x8}, {0x5}, {0x3, 0x5}, {0x2, 0x9}, {0x2}, {0x7, 0x1}, {0x6}, {0x5, 0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x6}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x3}, {0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x30, 0xb, 0x6c, 0xb, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1f}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x4}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x5, 0x5}, {0x6, 0x1}, {}, {0x4, 0x4}, {0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x7}, {0x5}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x6}, {0x7}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x2}, {0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0x9}, {0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x4}, {0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x9}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x3}, {0x6}, {0x0, 0x4}, {0x7, 0x3}, {0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x5, 0x6}, {0x1}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf81, 0xff, 0x7, 0x7, 0x3, 0xf1, 0xfffd, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x9, 0x4, 0x3ff, 0x2, 0x4, 0xfc, 0x5]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x5}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x5, 0x24, 0xb, 0x16, 0x16, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x2, 0x16, 0x3, 0x60, 0x6, 0x1, 0x60, 0x6c, 0x9, 0x12, 0x1b]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x12, 0x19, 0x60, 0x36, 0x1b, 0x30, 0x24, 0x9, 0x48, 0x24, 0x1, 0x3, 0x69, 0x5, 0x1]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x4}, {0x4, 0x7}, {0x7, 0x9}, {0x4}, {}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x2}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {}, {0x4, 0x9}, {0x0, 0x4}, {0x6, 0x1}, {0x6, 0x8}, {0x4}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x3}, {0x7, 0x1}, {0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x21e3, 0xfffe, 0x4, 0x7f, 0xc000, 0x1000, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0x0, 0x0, 0xaf0, 0x80, 0x52a0, 0x6]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x5, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3, 0x2, 0x7c96, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xc, 0x24, 0x12, 0x6c, 0xc, 0x87c638a0f70f5870, 0xb, 0x7, 0x2, 0x30, 0x5, 0x9]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7}, {0x4, 0x9}, {0x4, 0x9}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x5}, {0x6, 0x3}, {0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0xb, 0x6, 0x3bbd00ccb97126f1, 0x4, 0x28]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x5}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x4}, {0x1}, {0x5, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x6}, {0x3, 0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x3}, {0x2}, {0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x7}, {0x5, 0xa}, {0x5, 0x1}, {0x4, 0x17}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x3}, {0x4}, {0x3, 0xa}, {0x5, 0xa}, {0x3, 0xa}, {0x6, 0x5}, {0x5, 0x1}, {0x3, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x1}, {0x1}, {0x1}, {0x6, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x9, 0x48, 0x6c, 0x4, 0x2, 0xb, 0x36, 0x24, 0xc, 0x12, 0x6c]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x9}, {0x6}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0x7}, {0x2, 0x5}, {0x3}, {0x2, 0x3}, {0x2, 0xa}, {0x3, 0x1b}, {0x0, 0xa}, {0x1, 0x7}, {0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x5}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x2, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x1}, {0x0, 0x7}, {0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x2}]}]}]}]}, 0x684}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001d00), 0x2840, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x20000814) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000001f80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d80)={0x1ac, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x10f, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x7, 0x3e, @device_a, 0x10001, @device_b, 0x0, 0x18, @broadcast, 0x5}}, @fast_bss_trans={0x37, 0xe2, {0x5, 0x7, "98c3b81ae46f81dbed67bf53b01e209c", "0d2f1bf8c2733215becca2360fc8b8ef687e9542e8a59cfa3a160a15e017a4b6", "e02231c0e4df122b328731d09faaaeae8c5ea78d40dd812007588e0888931946", [{0x2, 0x11, "7f72bfcf6f3a8bb5b76bc79ceefc9371e8"}, {0x3, 0x1, "95"}, {0x4, 0xc, "7eec1dcb09b95a19af9536d9"}, {0x1, 0x1e, "8e13a06808dd20f82e93b85a9343d3c32e32451f157fe7e5a1974ff1fd60"}, {0x4, 0x16, "c9bfefcd02f93193b3bbc4f0e1a98753f73451c8c511"}, {0x3, 0xc, "d08026abd19bedca719a3bd2"}, {0x2, 0x24, "a4bb83bcd935cbb653e85ead1ede0f0503a9062fffacaa67a1cd164da13a4eca820d060e"}]}}]}, @NL80211_ATTR_IE={0x76, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0x80, 0x8}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x3}}, @prep={0x83, 0x1f, @not_ext={{}, 0x3, 0x9, @device_b, 0xffffffff, "", 0x5, 0x18, @device_b, 0x20}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x8, 0x3f, @broadcast, 0x7, 0x3, 0xa6}}, @mesh_chsw={0x76, 0x6, {0x6, 0xd9, 0x1, 0x3f}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:45 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x5000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1112.331152][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:45 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000009f0a00001c00000019080001000000"], 0x24}}, 0x0) [ 1112.435573][T14194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1112.455089][T14194] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ba4330c8 [ 1112.524646][T14194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1112.556937][ T37] audit: type=1804 audit(1629276225.634:1425): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1864/cgroup.controllers" dev="sda1" ino=14821 res=1 errno=0 08:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x600000000000000) [ 1112.636724][T14194] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ba4330c8 [ 1112.644553][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1112.687147][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1112.737908][T14194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:45 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000c00001c00000019080001000000"], 0x24}}, 0x0) [ 1112.786081][T14194] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ba4330c8 08:43:45 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x6000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x700000000000000) [ 1112.988690][T14194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1113.029634][T14194] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ba4330c8 08:43:46 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x7000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1113.075583][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000)={r4}, 0x8) [ 1113.168956][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x1000, 0x5ee, 0x6, 0xaba0], 0x5, 0x100800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x10322df95ff2ea44) 08:43:46 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000e00001c00000019080001000000"], 0x24}}, 0x0) 08:43:46 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x800000000000000) [ 1113.488317][T14255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1113.503924][ T37] audit: type=1804 audit(1629276226.584:1426): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1866/cgroup.controllers" dev="sda1" ino=14617 res=1 errno=0 [ 1113.555726][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1113.565845][T14255] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000fc76f225 [ 1113.594538][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:46 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000004800001c00000019080001000000"], 0x24}}, 0x0) 08:43:46 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x9000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1113.647337][T14255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1113.685535][T14255] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000fc76f225 08:43:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9b, 0x0) 08:43:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c560e00", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c806c008480080002000000000008000200ff0700000c00068008000000010000000400068008000200797c00000a00010001010101010100000a00050008021100000100000a000100010101010101000019000100d225acef4020c790d05bb7e95af03237537eaceb76000000"], 0x8c}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffff, 0x40}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040000) 08:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x900000000000000) 08:43:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x82, &(0x7f0000000000)={r4}, 0x8) 08:43:47 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000004c00001c00000019080001000000"], 0x24}}, 0x0) 08:43:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xa000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1114.101969][ T37] audit: type=1804 audit(1629276227.184:1427): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1867/cgroup.controllers" dev="sda1" ino=14130 res=1 errno=0 08:43:47 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000655800001c00000019080001000000"], 0x24}}, 0x0) [ 1114.282997][T14306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1114.308121][T14306] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009143566a 08:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0xe00000000000000) 08:43:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9b, 0x0) 08:43:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3, @ANYBLOB="0100000000f7830800223b7100"/27, @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 08:43:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xb000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1114.547528][T14306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1114.555995][T14306] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009143566a 08:43:47 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006000001c00000019080001000000"], 0x24}}, 0x0) [ 1114.636532][T14338] net_ratelimit: 14 callbacks suppressed [ 1114.636551][T14338] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b88fc34b7d48f4e2ca270328dee03dad8d72fd6e3c2dd994"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9acbec2116878780806ee469802c1e1f342198a71498e39"}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x44001) [ 1114.744423][ T37] audit: type=1804 audit(1629276227.824:1428): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1868/cgroup.controllers" dev="sda1" ino=14670 res=1 errno=0 [ 1114.784547][T14306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1114.798623][T14347] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1114.816394][T14306] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009143566a 08:43:47 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000586500001c00000019080001000000"], 0x24}}, 0x0) [ 1114.857847][T14306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1114.866351][T14306] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009143566a 08:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0xf00000000000000) 08:43:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000000)={r4}, 0x8) 08:43:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xc000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9b, 0x0) 08:43:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = socket(0x18, 0x800, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x6c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c20589ef5037c6acc02a48a70"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:48 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006800001c00000019080001000000"], 0x24}}, 0x0) 08:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x360a000000000000) [ 1115.291931][T14371] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1115.396703][T14373] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1115.412565][T14381] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1115.435477][T14373] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ce1f5ec7 [ 1115.479168][ T3253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.500178][ T37] audit: type=1804 audit(1629276228.584:1429): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1869/cgroup.controllers" dev="sda1" ino=14854 res=1 errno=0 [ 1115.513132][T14373] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:48 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006c00001c00000019080001000000"], 0x24}}, 0x0) [ 1115.603952][T14373] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ce1f5ec7 08:43:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xe000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x3f00000000000000) 08:43:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000010", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80df698010e815c916562656ca61d698c754889a53a0db8bae65065cc72b95a5dc5896198189defc0584b1d381cb22f98711e4a28b9d0293186fd940efce99198c5f1ce08bcd2712be38ff86fa039f3bb2c24ff1a644afa573087f6a6a88bdbd4404a777d2c26580b876e6a909a2022e3e4a32f7502f29272ff0ee9acb878fce"], 0x20}}, 0x0) 08:43:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x84, &(0x7f0000000000)={r4}, 0x8) [ 1115.881911][T14411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:49 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000007400001c00000019080001000000"], 0x24}}, 0x0) [ 1116.003345][T14418] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x6000000000000000) 08:43:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0x0, 0x0) 08:43:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xf000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x85, &(0x7f0000000000)={r4}, 0x8) [ 1116.376660][T14441] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:49 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000007a00001c00000019080001000000"], 0x24}}, 0x0) 08:43:49 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004000)=[{{&(0x7f0000001980)=@phonet, 0x80, &(0x7f0000001a40)}}, {{&(0x7f0000000440)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, 0x0}}], 0x2, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r2, 0xfffffffffffffffe, 0x2, 0x1000000}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r3}, 0x8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x39f2f18b12182ba1}, 0x1, 0x0, 0x0, 0x20084084}, 0x4008041) sendmsg$kcm(r3, &(0x7f0000000980)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)="963a778634384c7e1054fad868adeffd556e3e08cd3510c5330917460a422329effcdc1048f67f8388ab021f4fef714955a73ca2f2d87a08817357b7d341916b70a4e88ea01137e8aa973baa9b11211feac612e725244bf8e3b46ddfb3d9acf257a311b67197c0277e5c875a", 0x6c}, {&(0x7f0000000400)="074e23ae68aef17fa185192d09378d8ed88fd0033964f1b497", 0x19}, {&(0x7f0000000a40)="6c7f306122b62b96d5f3f4041e49060bca41b42c6c1308000000fadd0979555c3bd5f61df1a083c262a8e15bae70cf137450f630b4f89f1891fc2b170a820500000000000000200a50a434476400aa5859b5c141c32632cd10b5ff140c733ca5cca9540524cd5d7b791366309081ab4545cb784647d21d884f7cb0181e6fcaf14a1f9227f6501613ea2be3ed4691c4ee560ff1945700d44f534ea6b8385c96c773a91c48c2f22cca528d841780470707502ebaf1ff53fe49dd2d8a13d1d6eda82aa768f30587793fe7876eae5973ac085b6c496bc51ff8a1e5be7baa1da3041d1e4af789c9fa08aa77072346dd0000000000", 0xf2}, {&(0x7f0000000540)="032005904678a897f44d1ebc642e4bb208fc0abdef7074bcf4c62ec5359b09f86dbdbeee699abe890183371d3a0f7e28881b42d2fbe70e6b9ce184a617bb59e941dc4085a8a9594e23c22c395c5a40692987eba5d7b75c6cf2d7e2d73941575be49b7d66e65409e4ce55ed251e08efd03137587e75596ea6557dad9afac4f5f463ea0a27a34028988ac6919a0dca28080e63f1f97c28b8d56ceef160b65e1620ca0b9c8f36d056918a56a389e6b4cf608a0bc61527", 0xb5}, {&(0x7f0000000640)="183f53a493e7e177e5aa738421488e3bf1f394eedc71678953c2eed137c512dc975d24e20924159231c7d21fbaff30fe117372715523641e7b3cd8e0a63ca52dd9323d8bfe187b6dcb0d474df80702d6e087cc564ff4c6def7264af48c2389f08e74d1a767664d9ba279465f642b1267946fceb0398c52dd3afe282f9251295f9b386be2b575ba1939aa3a2d990dcf338fe7d9685b849a0dc2eece9828b960cbe6e3eaab95e4b417e0428f3ac986200b5e717967f0664b8fe873740c37e98e6dd682ecc8adfc756e0193590eaa0c2f619b5a9cf7a1059737a98f561e136269fe", 0xe0}, {&(0x7f0000000740)}, {&(0x7f0000000780)="054b7b415dc7f0991a59582e509942110d87efde7fec85666252bda16125dca54a665812949e36317e23155fa3534feb4196b3a7eb37ab54169ef1f008a17119173332a8c7139f95418ceffe8db564b4695b5daa0d1af2d787807ac28c91031a12bb2e6dd030e17a8cf8", 0x95}, {&(0x7f0000000800)="75e895e0ef16e756094024d25463649f4d9e56fc160db21849488b6c661e1887a27d550e78430b6d4be7de6bfaee031e2724ce95ad4a836aee4e8bf30f1d16e28886b993d86331340327a1b8463ab22db7e82f399e2dc87e1510d1515519059f4ed9e196bd14eaff7eaa3d4315d18c37af02fa5eb84da661dda7f5738ff00ea027d72b24fd89446655f6b877cb432000b3b3fbeed914ea15ffc86cb18cc1bfa12c6531d32ed367e6357e4c060c313b0689da996cf2226c4565418f4b31a8abc77f2dcb767c9db09109f8a4d8d3a1c3fa9d1845e0a481bece8f77d4eda065828b166b9921259624a2443c57", 0xeb}], 0x8}, 0xa000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffffaf, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x9, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1025}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4040001) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1116.410183][ T37] audit: type=1804 audit(1629276229.494:1430): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1870/cgroup.controllers" dev="sda1" ino=14855 res=1 errno=0 [ 1116.542473][T14448] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x9effffff00000000) 08:43:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0x0, 0x0) 08:43:49 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000008100001c00000019080001000000"], 0x24}}, 0x0) [ 1116.622562][T14444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1116.646868][T14444] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000fe0c39d4 08:43:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1116.799071][T14454] __nla_validate_parse: 19 callbacks suppressed [ 1116.799090][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.828384][T14444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = dup(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x8000) [ 1116.865574][T14444] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000fe0c39d4 [ 1116.958059][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1117.016253][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1117.063045][ T37] audit: type=1804 audit(1629276230.144:1431): pid=14472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1871/cgroup.controllers" dev="sda1" ino=14660 res=1 errno=0 [ 1117.102794][T14444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0xf0ffffff00000000) 08:43:50 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000a9f00001c00000019080001000000"], 0x24}}, 0x0) [ 1117.156215][T14444] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000fe0c39d4 [ 1117.170673][T14484] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1117.224190][T14444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1117.249414][T14444] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000fe0c39d4 [ 1117.291209][T14491] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1117.392626][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x11000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1117.467606][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0x0, 0x0) 08:43:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="87c158f58a1879ebec306f0ae02cf515a9ae1a8a1c25a5391522ff445af8169529ee3cffc20e325ec2ce27a9895c3720335295f34dcd860d7ab09ce3c5a93206b211994c68d250bf6affe83d2d3c191e0593e47560d21989667089ccaa6aff2318430f0948bb128b826354deb7942ca4b12533b02389a017ddceef278ceab995b2f2bb7d52219f8d7b5b7b9e10c6f554ff8fd660a64ab4ee0068d196a28b85d14a32c9a483e54609cef5290bb4147a91ba1eeb0fb044d548788c9a9db4ba3a064e25fb7a29b202c67654b358758a2dd5"], 0x20}}, 0x0) 08:43:50 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000f000001c00000019080001000000"], 0x24}}, 0x0) 08:43:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0xffffff7f00000000) [ 1117.666355][T14506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1117.682664][T14506] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000099fc31ac [ 1117.748065][T14506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1117.756097][T14506] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000099fc31ac 08:43:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x1f000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1117.833821][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1117.860759][ T37] audit: type=1804 audit(1629276230.944:1432): pid=14515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1872/cgroup.controllers" dev="sda1" ino=14844 res=1 errno=0 [ 1117.899798][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1117.938641][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4, 0x2}, 0x8) 08:43:51 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000fffff0001c00000019080001000000"], 0x24}}, 0x0) 08:43:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x9, 0x2, 0x9, @mcast2, @mcast1, 0x8000, 0x80, 0x8, 0x2}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008800}, 0x24040080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0xffffffff00000000) 08:43:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x20000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1118.273984][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x4) [ 1118.353374][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:51 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000011c00000019080001000000"], 0x24}}, 0x0) 08:43:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x48000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1118.530293][T14563] sctp: [Deprecated]: syz-executor.1 (pid 14563) Use of int in maxseg socket option. [ 1118.530293][T14563] Use struct sctp_assoc_value instead 08:43:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="007472932e1b575cea1953a19e880267b47c00", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="000040001663caea519d4a0ac317768799c9d43cb891e2252ad9691cd108bfed746087c7cdae8e333abaab6999c29186daede9405e2220506520e374d4893e4a95c19822ebc89681a5b4234e613e7d21c7327bacb17642fdab60c6256a623bd4a307499f45e975200bbddc25ed3609c064c31cab2e7a4e89958448dd44ae8a61657144385fe00a49cc7c4fe4f3e044d59eda5c66ab28bd1eb901f25af81274f2fd41b839c2"], 0x20}}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335) 08:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0xfffffffffffff000) [ 1118.665385][T14558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1118.676077][T14558] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000043057dff 08:43:51 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000021c00000019080001000000"], 0x24}}, 0x0) [ 1118.735973][T14558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1118.760707][T14558] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000043057dff 08:43:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x4c000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1118.848237][T14581] sctp: [Deprecated]: syz-executor.1 (pid 14581) Use of int in maxseg socket option. [ 1118.848237][T14581] Use struct sctp_assoc_value instead 08:43:52 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000031c00000019080001000000"], 0x24}}, 0x0) [ 1118.911517][T14558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1118.942224][T14558] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000043057dff 08:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:43:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x200, 0x4, 0x6}) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4008010}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x60000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1119.086843][T14581] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1119.098493][T14581] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000043057dff 08:43:52 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000041c00000019080001000000"], 0x24}}, 0x0) [ 1119.151147][T14558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1119.177842][T14558] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000043057dff 08:43:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x20000008) 08:43:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0xc0800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12000120}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 08:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="f44a899d36c5b8efff090060000002", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) 08:43:52 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000051c00000019080001000000"], 0x24}}, 0x0) 08:43:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x65580000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1119.551615][T14623] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1119.565614][T14623] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000cc1e2c52 08:43:52 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000061c00000019080001000000"], 0x24}}, 0x0) [ 1119.601081][T14623] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1119.612836][T14623] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000cc1e2c52 [ 1119.717831][T14642] net_ratelimit: 12 callbacks suppressed [ 1119.718771][T14642] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x324, r4, 0xdff45d7430ad097e, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f5a1a9fea91ffba6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01d3adac868970d5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d9076a6313b5470568958b51a697d6a4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d9279ef6e275d709e4f1677aefc52dd2490d32c79925bea2e4ac33f23563c03a"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c58e962a38724c6e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d520f8e59ec3597ace33b954322a9d42"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "06ad2bbe54b8b942"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bb4250f5040b0ce415c5a86fffd9f1bd"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="66b2919f805172f09c495e806ed15b959cfc5197a430175791f08afceb3a2bed"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eaae9d942e0078e9dfa3c126283fa3a6520bf2994aa92b473764294fc501c47c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d8a788352b307d865c42b98731bd0485"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a7a05a585431bc2"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ebea053557e4d29d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c068060e843758e50ac25c3c0ac0c9e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3f}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4cc002f62e68348686f4efafd981faf3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e7159ec8d381466cd9c849b4cefbbf8d"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="93729a02870c307fc9f9ff6b8587f11d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffa}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a7d99db5ad15f75f316243925db6f652"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3164c631e8dee095"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d16dd82ab5ce1c4747b81b0d264b49b8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="aa20ef61e2a04472a707491602b6c224ad956dc5d58011e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d522628d1d2a1ba8"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d318582008fb2109e6ed948af71436e928806de5825a9d3c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0c414a255fe5b67d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5fa926e64c1d30d986556799b5500ba9c0c58a89e813d356"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2746ae152bfceb35ce45c29d79981e3071eeec3cc6ac0c198a48290bda7b22ca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="473ea374347317d2d31e339d35fee04a"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70382707d4fd323e49dbf6904ddf6e0b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="413edd466d9c98b9a8b75784ccb88932"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7881526c9d2fadd2f593f8196f07ec671f587372143fe1a0"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f23af2762a4fa189d51f52b5b224c8d200f95655f9b06e22c0ba759b932be108"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1119.772027][T14623] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1119.803305][T14623] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000cc1e2c52 [ 1119.833074][T14652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1119.871978][T14623] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000600110020d200000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800000006001100ff0600000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00840000000600110080660000"], 0xa4}, 0x1, 0x0, 0x0, 0x42}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x84c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x77}}}}, [@NL80211_ATTR_FRAME={0x236, 0x33, @assoc_req={@with_ht={{{}, {}, @broadcast, @device_a, @initial, {0xd, 0x5}}, @ver_80211n={0x0, 0x4, 0x0, 0x1}}, 0x0, 0x0, {0x0, 0x17, @random="dde195898fe10e346765e6913ac39e03e444f1261fe3db"}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x7, 0x0, {0x10001, 0x4, 0x0, 0x2c2, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x0, 0x5}}, [{0xdd, 0xbe, "e5e2ea9fe074e5350f2a274e98208cd8722ef49c91dd55f2443b4c885029bc7bb9785063371367af12f5e5a6c575aac4da19a9ec1565771f9d6ee8f427f60195cfe7cabe993297c816dc1e93b400e8d331a6c958a62ba48d0ab80d99678717529ac8b6c96c2a9038c967051faf2927be4f7465740c6f4489bbbbce1e8bb34993b4d08c8c236988c97d69747b62e2c7f824ed18ed3312f65affcfbe7a40969ba442b420a5f1f2f20055170197444dfb93f9fbe45481bfba39a3ac51cafe92"}, {0xdd, 0x75, "0d4188ec0cd4c7a5fd9ff418afbd878e8123e146099e45d9eaec3df8a229bafc935cf2d42a65be1684654c617dc8cbcf5a78969a319e328d2b28a0100a030409dcdb309f404aa686172f4f4c9af39343789048c7bb495f02ffc1be0211edf06363610628c786850a853043400baaf916eaf18c91ef"}, {0xdd, 0x94, "c59881f63d662f31e213ab2eae1eeae2798bfeed2bbd632622bf14ccc81f0bce06e778b9bdbf5db70c0ae91db0ce90d8ad4ecf65d6f76ba84e53ded1b64a3fe4e7e43a031dd730c9e2ae9a4ce8f4a3d30f638edc66518423166252c0ccb20edb6129c8c4f656f2ca93497ec737cae8d3e3c0e9ca8bc0e387d9e7e9079e0f147a1c03e85344443f17d17739a5908dff34e29b574f"}, {0xdd, 0xe, "7411de8a55f0b9606d8a1c4fbe38"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x40, 0x5, 0x4, 0x0, 0xfe00]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe9e}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x5aa, 0x33, @probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_a, @device_a, @initial, {0x5, 0x8}}, @ver_80211n={0x0, 0x1, 0x1, 0x1}}, 0x20, @default, 0x3800, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x6, 0x9f, 0x100}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x1, 0x0, {0x8, 0x6, 0x0, 0x2ff, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x8000, 0x80}}, @void, @void, [{0xdd, 0xfd, "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"}, {0xdd, 0xf0, "e0eac2a8396d9ca64d5ad99799f5100e9d37524a218ed4cbfe938cf3533fd225ef82a6bc897aef567d11126bbf57112fa7f444563d4505d92d2cce0b3d948ed73123b63da473cf86acf57c4eddbbcffc54377391c7e41094be6c8779b10cd510e3f75cdc7a9470b33f03cb12557c497529ee4908d3de9529395406c8b06b355c6bd28065388387b4f8d63e1b33182a1a08b5fd451ff66634eb2b745e64e5380afe56e6863204cb8b54c3d2985a23510bf330bb962e3c3f437b448bc7c2b88eaa045019317e5c8a0eac6fba0b844d096aedb29cf53f44251656742f9eaa5ca916ba8a7d89b236b2d7b6646fd6908fd073"}, {0xdd, 0xa4, "118f7fc8ba570d425ecdcdd087641ed7c9cbbd47e82855b2900b09c1e29be37f76257ef1459068a39499991d1ba73f81a64bc090c9a9b8ca56d559be04ab2182354fae8b922b977ffa99780ccc68ac365142c625d0d83edcd9f20a31355bc28bab9fa5309c5f0facd6069c4a70cc2a4623da3ef2e9c04435aafc19c37c142548f83bf35314ad3a85afffe6c33e61b547a0369ffb67055e5b43fdff9feb182acab7279f05"}, {0xdd, 0x96, "be69dcfd2193ed928ec0895cf6ae95816ae23d2e0d6d4c9f3a025c8b8d275e66c4008f0e7be291292a5183e10ea29173f224c32b2f384e20b8b40603a0054d307adbd7d0d1ef7fcac631545e419834055e3a3c664e6059fbacc0b5b4d8777b19c83fa8033d6bfc80c1a4b50b89693253abc44d7daeceefb2a482c8e7315146ff1072f0c54991cc46b0f5d83b115ee31d56fbb22a76ab"}, {0xdd, 0x5e, "e35b9e1f5e70954e64497f23348d231d160f609ad4ffe883cfa3b0fa4c48853851451757a3a9ebc9a9e7c32a11201e6ac4183b4b7ef739a645cb16aae8a71f7468b1af0af17c4d3889eacf3eb2febae2d1722a4ad125c0a5440611166a32"}, {0xdd, 0xfb, "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"}, {0xdd, 0xaa, "f03280febd7568a4bb3fbc12dd7e1768f64e4b0a0c506671ae5da209c233929a7a07145b9385c10cd535396f1cc69f1184fe949882b0f950c7f735b1905315ada1b7a8eae1ed07b0d977004017e559197b689c2b8010a651db3aa22fe3a0c5d486ac903ef73a789af628ab1596d76c333d99421e6929ae2e8ba1f22de2beecf142df6b51a89e93fe4e4131dedda15bc60a9ad0ef96e1799fe2de99ac1475d3d7bee9277e59440e3cdce2"}, {0xdd, 0x18, "af020a9a904f7c96866c314cf868a6bb9a2de1b5046af285"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe5}]]}, 0x84c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:53 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000071c00000019080001000000"], 0x24}}, 0x0) [ 1119.896759][T14623] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000cc1e2c52 08:43:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x68000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:53 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000081c00000019080001000000"], 0x24}}, 0x0) [ 1120.175128][T14668] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c1}, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) [ 1120.284532][T14673] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, r3, 0x0, r2, 0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e23, 0x171, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, [0xfd, 0x0, 0x8000, 0x5dc8000000000000, 0x5, 0x7, 0x3ff, 0x9, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x3ff, 0x9]}, &(0x7f0000000340)=0x100) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000140), &(0x7f0000000200)={'U+'}, 0x16, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xd, &(0x7f0000000000)={r6}, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x3f, 0x0, 0x4, 0x0, 0x9, 0x3402, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x42000, 0x2, 0x5b2, 0x3, 0xeeb, 0x10001, 0xca, 0x0, 0x5, 0x0, 0x19a000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 08:43:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x6c000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={r8, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4a, 0x52}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x285}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x24000094}, 0x8880) 08:43:53 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000091c00000019080001000000"], 0x24}}, 0x0) 08:43:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000600)=@v2={0x2000000, [{}, {0x1, 0x7ff}]}, 0x14, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010000f1", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0xfff, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e20, 0x80000001, @local, 0x3ff}}, 0xe8c, 0x4}, &(0x7f0000000100)=0x90) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f00000004c0)) preadv2(r2, &(0x7f0000000480)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/128, 0x80}], 0x4, 0x9f74238, 0x9a, 0x10) [ 1120.656528][T14699] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1120.721398][T14699] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. 08:43:53 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000000a1c00000019080001000000"], 0x24}}, 0x0) 08:43:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x74000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x5, 0xff, 0x800, 0x1}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:43:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1100) fcntl$getown(r4, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:43:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x0) getsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:54 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000000c1c00000019080001000000"], 0x24}}, 0x0) [ 1121.189640][T14730] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:54 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000000e1c00000019080001000000"], 0x24}}, 0x0) [ 1121.255638][T14724] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1121.286751][T14724] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000000b0641b1 [ 1121.339077][T14744] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1121.402661][T14724] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1121.465399][T14724] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000000b0641b1 08:43:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x79050000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1b002c80"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 08:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x42000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x84, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x73}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x98b}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb03}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003c9915168a7e453fb2a53ed257b8f9e4daf701fcf4b9fbed7d020aa6f5b679b6e378c1551612819893e2136643caca0d933e6b768be113f79d24678e010080aec1b8c8fa8a7091bde009ed2e25509396625d4265dc8400d3ad3b98873185d893250c5b74cd02f378368d86c0d5a884d990b79cf32131d26d763b18994debef466386d1b5ddf091c443e2c35cc06d844b7137839d64208f91a187917221", @ANYRES16=r2, @ANYBLOB="01002db970000000000000000000"], 0x1c}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000090) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x2040001) 08:43:54 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000101c00000019080001000000"], 0x24}}, 0x0) 08:43:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000bff89b7c7961b6a7f7b30a74ae6dcb00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1121.690357][T14764] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1121.770115][T14773] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1121.838941][T14778] __nla_validate_parse: 25 callbacks suppressed [ 1121.838960][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1121.841951][T14769] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1121.863380][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1121.888557][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:55 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000481c00000019080001000000"], 0x24}}, 0x0) 08:43:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x7a000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="334652b9e6040000000000000000000000000000000e5745eadf433bc4ac9e7aabe17e3d6fcecaded8d93a4a9ec0395c8c25a3a84ca9b838b6a2e303081f1a428fd81047ad855bcee97de6e0fd217db5d611045e360ba64c27517d08d782b107706c2abccb8d6179a29d6938887f0e1eac8e51b9cad88675262ccc", @ANYRES16=r2, @ANYBLOB="020027bdff0fffdbdf252100000008009e00020000000600eb00030000004d002d800a0000000101010101010000220000013c5d1a64d4456e848b19f4a6841238f370c8cb8975ab2a7588184903f7c200000a00000002020202020200002200000051bc9ca4079903b3a4662f2ffb5e033b4e536e15a4f5000000000000000000005319ee49d535488410a9a0d0de162ef9d39ddc26ff879436aeb2e1d64538bfdbfcae394bc54faacefc501c3fadac8d3bbe5ef774cd9b4e129764230e355b411cd7ec942c41c51deebb"], 0x88}}, 0x80040c0) [ 1121.931761][T14769] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e65bc709 [ 1122.069526][T14769] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1122.107642][T14769] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e65bc709 08:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1000}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="018d60977cc4"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x101}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2007}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20002005}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1122.160990][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x7b010000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1122.209165][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/842_compress', 0x14c00, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x1, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:43:55 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000004c1c00000019080001000000"], 0x24}}, 0x0) 08:43:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}}, 0x0) 08:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0851b8bfc5864649"], 0x60}}, 0x0) 08:43:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x81000000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1122.549326][T14815] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1122.603276][T14815] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000078d4af6b [ 1122.657416][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1122.671927][T14815] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1122.692796][T14840] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 08:43:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x1) 08:43:55 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000601c00000019080001000000"], 0x24}}, 0x0) [ 1122.705942][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1122.718524][T14815] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000078d4af6b 08:43:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000dfff030000022100000008000300", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) [ 1123.003733][T14815] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1123.043910][T14815] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000078d4af6b [ 1123.094259][T14822] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1123.116915][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1123.139885][T14822] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000078d4af6b 08:43:56 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r1, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000002c0)={0x6, {{0xa, 0x4e22, 0x7ff, @rand_addr=' \x01\x00', 0x6}}}, 0x88) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff5f77}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40800) [ 1123.218563][T14815] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:56 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000058651c00000019080001000000"], 0x24}}, 0x0) [ 1123.265104][T14815] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000078d4af6b 08:43:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/120, 0x78}, {&(0x7f0000001480)=""/29, 0x1d}], 0x9, 0x40, 0xfffffffe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/module/battery', 0x101000, 0x1) mmap(&(0x7f000078c000/0x3000)=nil, 0x3000, 0x1, 0x8010, r3, 0x9d704000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000001640)={0x2, 0x1, 0x494, 0x8086, 0x5}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xd, &(0x7f00000016c0)={r6}, 0x8) [ 1123.423519][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:43:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r5, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000900)={0x0, @llc={0x1a, 0x201, 0x8, 0x1, 0x0, 0x9, @multicast}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @can={0x1d, 0x0}, 0x200, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)='syzkaller1\x00', 0x0, 0x2, 0x401}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000c80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001980)={&(0x7f0000000cc0)={0xc88, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x2c8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x0, 0x92, 0x47137530}, {0x4, 0xb, 0x6, 0xeb}, {0x8, 0xa, 0x3f, 0xfff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x2, 0x101}, {0x8000, 0x35, 0x9, 0x15c}, {0x81, 0x2, 0xff, 0x7fff}, {0x1, 0x6, 0x9, 0x6f44}, {0x5, 0xc6, 0x34, 0x7}, {0x3, 0x9, 0x5, 0x80000001}, {0x6, 0x0, 0x81, 0x7}, {0xa3, 0x4, 0x76, 0x4}, {0xf53, 0x0, 0x0, 0x7fffffff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x901b}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x9, 0x2, 0x2}, {0x3ff, 0x5, 0x1, 0xf34}, {0x81, 0x7, 0x6, 0x4}, {0x8, 0x0, 0x5, 0x80000001}, {0x0, 0x5, 0x0, 0x631}, {0x2, 0xff, 0x8, 0x8}, {0x6, 0x7, 0x7, 0x7fffffff}]}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5b}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64140370}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r7}, {0x238, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xae92}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x3e}, {0x5}, {0x11, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x19}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0xc88}}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 08:43:56 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000681c00000019080001000000"], 0x24}}, 0x0) 08:43:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) read(r3, &(0x7f0000000080)=""/29, 0x1d) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:43:56 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xb8170000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:56 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000006c1c00000019080001000000"], 0x24}}, 0x0) 08:43:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000749000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x73de4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="08a76700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:43:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000006ac50cc4", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) 08:43:56 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xc3ffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:57 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000741c00000019080001000000"], 0x24}}, 0x0) [ 1123.946819][T14909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1123.970681][T14909] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000071d78fd4 [ 1124.022549][T14909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:43:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1124.064985][T14909] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000071d78fd4 08:43:57 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000007a1c00000019080001000000"], 0x24}}, 0x0) [ 1124.138291][T14909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1124.165454][T14909] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000071d78fd4 08:43:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1124.296052][T14912] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1124.304121][T14912] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000071d78fd4 [ 1124.344178][T14909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1124.355475][T14909] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000071d78fd4 08:43:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xf5ffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:57 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000811c00000019080001000000"], 0x24}}, 0x0) 08:43:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000300)={0x7, 'veth1_to_bond\x00', {0x3ff}, 0x353}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440c5}, 0x10) r5 = getpid() sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x184002}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x1178, 0x2f, 0x300, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x2c, 0x0, 0x0, @pid=r5}, @generic="74ef8f0f9c0fc5cd30c942a95d9fb418b447264bdd96c31cf8912d80ab074c5989abd6eba2155cf3639807bb48b3127ad073a98b6ffa0b548fadb2c301accb182f64203c8efe1b2a3fb7eca062e5035d2e2742ae5a60e3112158a20c9128c9b3411a95a10e6ff41bc23351c386b269092a5b8823e68ceec684e504a131ac3ceb1568315a2d7e127c7a", @nested={0x10d0, 0x49, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="4715c220561698265cedab7a9c730d17383c98c8152e82cb7947ea9cdd5e10629c6caa3bf184b0a260c43e143f28a79f8ea20063adbed8ea4d5215ea097691c987030bbbd1e790f5a17606c371f6ab5bec3565410fb42ba2eb9205ac2374f8730f40ee96a91a79e0aed52530909cc2652e8063b5b09b049ed8c4a5050ae27bc0d2ed07af73058ddde1fea983a1d66f6e81f1027180a6d11a70dee39bc201cbfe3bab046a16fe3c384ddebb674ba28b6b1d5c763485c821c5a0b5c87788371c1758f766c9842dac1c9acc3974037c2c049c35de7e2ba334cd4908b65734f16bbe355297edde89abc357e4123909009f842ceb1b694b8304e794bcc09525db876a5f1c1693a5dff4a29938b6b66520ea2f10655fbc1d52f868bfa7d35e566f24af94134ef699ae5bef63cd3c87a6aabfd58d3bcfaa5c1ad699c17ce1517e61758380ba22b5ad34bcb0113c09b81896ac26c277f715d1a01199429092b5a971ff63f3441e70432e7000585e272b8298ab783d080fa44e87cf143ceffce7a83ab399266d06705ddf912be81e0f3f4f0894ee6a9f018252c65c7d23c241a0f3fc579df0d1e77d5548c25a8f606df238d1c7982e04eeaec8b6b255ec95040645e266a863af8af7e08c147a4e4b8bb31a9e93107bf0fe2212373f27ed0e75c5e3fe8781934ae7a180d76e4dfcad29f3e5320c95feed3e384fc48c09f17f27c19369e3b0a5848e28fb734db828ae5161a394cfa32d936dda195849fdcdf4c0d99df20eb0b3f56a01eeca8ee37d27d92d8bd581a129b5a2275c4dc4a7f53a2dbfbdc3b0b557f0ab1045269adfa49e8fdeed828c9cab9823dc9ba9478736057733f415eaf33c85974d2c6ac66d86ed0a2f29b688389f8b0d349ec5f9e94743fa058992fa48e5e7430028fe2a2fd97a043c0f4fd9413c27d0b42f36c9df7dfd0818b6e0d11cf1765ad269e2bbfef32985b2969f5843d25513f73181ebaeec940c90673045d6d81c9b98c94296602a12c594a207479429c7643a92e42bed3ef4519696955f65fd829f72289f1421269791179b536c097395bc684852f2df2ce049ebf4b0304841025855368cfddae7ace673641fd5010d1cb913f01c39ee6df025da98c0ac289a945cf207c674e4ca0769c455c9f6aae6917495a42397d8eb337f0d1ff693b7f3c1a381b007101c8c087336bf5d47dca0735af6944a0d2e9b6533b5b974ecebb8c12cc9bb8f4be1c0ecbbdd53de44fb599c42b5a024d286145a4b619e4d651c4bed82a6e3fab55db684cba1b049678884b592a01aff97ebacbbcb829d84d25afc5fdc7de9ece6da1c86b621ae62079494e88b2c727b7bfd8e85df2e2496024b88f1c55725a181430c14bf8e2913a982dee7c1e91f9857d25027f96dcf56a16e013038c1192410130b4e33a09f2b84ca05fe05f238841c38e367378514f3f05cda5a1311b00bac813f99d381bdbc495e4d2fb0210be9e2ea6fecb32c55cac738b09813999f0597873af9a43f782cd0281899b66f2947ed61f240cc4dc2dd4b8af5ce32f46d127094861426653f2c8c91a532f9f3453d11029bb4ca07a0a30eed612e9c566ae20235dcecc6d74a8918197e269b4521058d19d681c558d0618ff7f1c39d307f2e0750aeee87d73620ee8fd2ed15def4a7a2aa98e444896460febf7830c6d8c6b5de3c8a3b99b8042a217df21f3b772630731cdf94baab369956431a2b35b79639e802eb99b508e4accea1d69525641c1f8ac987071a4921235c8e6922e7e9e84ac7304d556408bda897dd95d2e468f7e3048e111366ea81704775405fd06ed4f3821062681ace246c37c2b1ed5245929cb999164c2a3ab20292217be8c77a64a2490dfc348155339c5ff00014d2a67ecbf2d67c8b903bd5d791cdabb80bde0e3e6813f8845768a02fe6be1fb1367b4760f29d74d0001b157074cd94fe8730804317f8af82272e2675a51b0a1a418c73a3d06f2502c65f97f6b1b2addb18a20c95e957203f451a22c70c7588655942531607f2842dfba7cdcad8e150756ec5e604c32eb30b1b04e6ab3d9e33d3265a22d4e479a1bdf0532df116d93f1ee8f707721133089a710d8a7b94afe05ce1d5db69bffd5c36fa53554ac91a8f583c085fd27c414d52a8ca9289abe144fbc302e8803573ec18d7028c9002933c714fce54ddbd2015c735154c8805db5ecc8c43e950f1119641973e6526b7bfb3774577e713e0c5aed5db534e5b8471093cd1e712bb749a34f5a250acd40b602038d6ecca8fdefe24af2c2f6659a197ccb0aa43632b774b7b30096c5b908bc01933c3e786f3e231364751bdd75fcfc1fd451f9319622d86e562ae7cf9eeae55b41db4e1920b2b0a69ca423f8b671fca4b644a42eaf9f7db97ec8d08f76d510243bb5ac755c4aa8e07ab923bd35a5b7e144a68b402f7075fe37d13bba8f4999ecdcf2a913d2509c06668943add450b9500db640afc948be7b4cdf3426f197286737e8c6004e3b96eebe40e317444d99b07a43730b0017c142692db0d2b904824110ad489b8c7bcbfaf85d1dc2cad0ef5b278e976fec7fa9db4cf726bafa3cc1f079384237cd252dcaa4b4a7ceb33c78e55d9dc629772dd67cdc81ffc77aaeaee94f126ba31daecc1ef99fd5ff943b2a03305a0cecfcf1df0128b9aada0aecfe1f69c1f7f36e63bd9b495ff2dd892533dae6b785583408df87d618103c06a814baac5bf8335637029ba66b8e21958dfae6a86c433ac85e1a796f90517161d35cb8256435981520df05fef542d37de2c70b47937a12747611e5f07c6a8ac4828f07c9b7ae8f81af0b6e10aac39314d10a3b90f5c9d340e942fc32dc72c318ef8b970197e71a0e5ebab27fae815097c8ffbecccc0e0760cd63e9be78bdcfb4d262a10766a1d35743030204196c1b9682f7cf83865f75d9c405d7d9fd9ffce43874d149b6ff0e910fb023826ddfce74452ad7be969608c3ccfaf13a49fa0c6b44d56e791e23c3414b32bb97593b185238b2eea57f40f3a674ed8dac79b8aeffcd6ef1283d3f4ac8def32b747a1e636a58a2dae83e009cf28f7d11b4bd46453905206b5f3e35f6963053bce58b4cf5f44db8a887cacd13fa9fda51f5cb764b724b9ffe641738fc28b830657c2286b71b8b4017b2d9aa784f89e8820685bb0bec39e46a37761bd9509799865b1c59e087c0a25359c2f934b25a0d5198f87a528dfa3c4c16ef1eea95f18fef9056d53945059431dbb5b686a97c18398b402df835a7ed2b7469315a4219bdde92e235f3657cc3a74792b6d153cd314ad34fc3eb65207fd4b22c9a31c675da7c611d9b645d9d8882879a66c8474f8b0cf2b694d1659cac52b07496e4346abba9321d613e4a04f55fb1ec1923db029d9bd9483bf42ce479d39bee1acd6f626fd5eaca4c838fdf28967fcf9d2bca62ba4012ab3508a03c492c132a65ddb2205a21c65c8bf981a1fa7e092567bd146cad204ed552b7a49336f7caf36deac2b6bed3e1cbcb0a869c4ec058710435edf7b9592f170c8194099ab9e9bacd18ec0d1521e1f95334211014db21ccde4fd2202f7f9e7b5850889c7b4ebf52064f6bb4f5b3cd271a0fd078d0e4b85a19e738a07aff7ff1c8371c91bdc9a6114dcba78872072ece23abdb0cb324ceee8bb5d0640fae5afd7cfa85e4748d6ee62238705f3b51e596e2d8bc7f5c10ca7c0fdb1b19620d58d3e0b453d9249a1a7ea465270201faab74172c9a555b692ebe8c07b198447a21ffdd1610aca60cc653cf6066ee14a1a53563c28724a40d59fb53f491754a49c37ac720bbf4b0625d7ece3e2b7a963cbde279a94dcb03f7b2a92329aaad11846bc058e74e6710639c2ce8a8f85718348979edb4e06781dc770be7045fa0446b4d9a7acac7f58d770d97bbcd14e1133dd33d8a76ea36d482e7ea47cf98692ec9ef384e9c49518b641957b3647035dd050adb714cae4134f3097c75f0ef4606eb8f33628c4b707744fbf146329f7915e72206a8e3b26cb9709340899d45901a789cd9da0fd5cf66faaadac7ec5d69fa6abab4ddf4bb2847de40582ad4927db0d44a6fe960d2e8cb62ffd95695dcaaf902542e1d25c9e80b004fd0f55dd13f3b9d4ad97c4cc48780dfd25018de116f76d75c57e34282d443ed9f8d35133da828e7e17910c8f306f95629f42d1a6a6bf1ab576edf14be3477480cb437158db67788f342b3ef45ea2dc47c499d6794565653a1ccfea2ec43c6d25fb540c3bb85e2e18cb57e1a996a3b1dca81d95676cf763f359a2dfaa9f09c0d369ac3863fcf2125e908362ab32362f7ad5db7f9ffe28af5166b31c04e33df84997104c7d12d662bda5d9325dfd548ffe6776738b79e19f8b74a3de9289a40dfb5f027343a58d234fe3e984ced5d26a32b6059659a6ac20c71f01dfb2ffaaa88b7792aaa0c7ce988d6030566813676f7305697869998317dfb647fc9d9a3cd83cd19b09f46479a68f42c6529c787a1b1119dacacd643465a6b7e75574977bc4fbe5e15f932111dc1d4d95269370761b2d3c1c5a57268fa1e7ec451dd384f17b3d239df3833dc795a8f381322ede2ce91b6a1296e278fb1230d0a7f5e3491534c72f8414effd8c078438ee31f4f82408d261f25b7a1c0279826e087f53f4d6795192e866adbc10949a9fcbad9ff5a52e97c04d8eef0c60bef1862a183f5b71b1590d07762a70176e6b57f5270275e976ba1721a0d2ee961ffa5c802838d51b1b00bdd7bb6d90c096793320505deb6114e6771cd3c154d96a56278a57283c1e01e8d733ff1ceb924b134b08c575cbb6ec3e06add9aefe981e464574fb3a7c6398073a64776dca073b0b15df0bb4a40f8c975035c50085c3ebc6fad00278670f84501ab2ae23cf0cbd334358e5b26b072572a863a63532c7bc886b2de1d918ee5b20afe965823334d447e682534c603b2179d38cfabd32cdecd789c6ded1af8e31e62bbfefa9d632cfbfc895733d5c57125ac9bc662be76b02cd026c175e3937fe01a5b32535fcaa8091137a97afc28a391893648e0d6cd6c60a88901691e76a25fadb32a56a5785eff31dc41e77e137b975f3e480bb90d5518b3b4123eb3ee30e710f235d58301daeeb513d2abfdc87f7c41d523f2765f3b4ef1b12caf066ab347e92af7fd0b46737fada8a35895e6b98d6c456d2fd459be4b2c7680ca9b2c4ff844f532bec856055c32077d2f98e0c62ff7daef0f14f6993afaff4729558b10aec9ac3786a8da913ceaf7e9fd84bd1423b56b10c55d0efd4dc34230ae45d13929c0453046e03cb551db9c195f441876160892853fe054b138b8ee31fee893877f215dc815f37d85c2f9edc62564ccaa04ac0f68d54dd3bd886a71d090bb82053f73b2850883cc4884f6329ff87d554643a1d000a4cc59d926cd7314e1ca03ec75cb587e7cbd4017fba8cbbbff5bdd086900c71141d656ab5c09a12a8688c16ffe8fa07d47e47975a897a6c361c1047b570636a9e795baa9f1cf3d0911e9555d88aac84fffb38f98d53bbc8b1c0959542f5cb219f8c307258bd25f3c991fb0fc5a6dd3a814314b4063ba7ee6b8293287f17a6ef251982a45ab24448afa814aa0c1fd7391c80b2e5e2c6d000525df66d9882086e85cc44f8ff3a5907a7dcf64cba196e55cef8e71b0320e5fa98d69a4952994ade01020622119b92b4fb1258da8f9cc501961d064056296a9a98c4fd15cfc827dbdd0623229f5600a155c966d01bbbfc6f195c619b6f1bdf8cd07412de93fb5be25e8250f84cf37c440318753074142482823d809ae579ef2a7dae58c2b8", @generic="451999c1d908806a8c6e83efb7b150fc1bea4f34297e550e4f04c09e70c9a56132bbe949655cf591cb6f540e485b2388a09a23db3cb3978b7f54a9cf6d6cee3a926cd1fe0416e4d159992abb901e27708bf61120657582436aaac9b485b98a5ef61119663f417dcbdaaa65a2998e3a03485637308fabf06e078b2f0c6e2a721661817366d5fdd99bf0b9082beb2b31883e39337bf2dac58f9006488f227f7041531393cccdca88f1a34a9a9acea2ed76"]}]}, 0x1178}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 08:43:57 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000ffffa8881c00000019080001000000"], 0x24}}, 0x0) 08:43:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000080)={0x5, 0x30, [0xe0d, 0x0, 0x1ff, 0x4], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:43:57 executing program 3 (fault-call:7 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x2c}}, 0x0) 08:43:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1124.848966][T14964] net_ratelimit: 18 callbacks suppressed [ 1124.848983][T14964] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1124.850968][T14956] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1124.889583][T14967] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1124.912094][ T37] audit: type=1804 audit(1629276237.995:1433): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1873/cgroup.controllers" dev="sda1" ino=14895 res=1 errno=0 [ 1124.939094][T14956] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 [ 1124.954458][T14962] FAULT_INJECTION: forcing a failure. [ 1124.954458][T14962] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.993079][T14956] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1124.993220][T14962] CPU: 0 PID: 14962 Comm: syz-executor.3 Not tainted 5.14.0-rc6-syzkaller #0 [ 1125.009850][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.019903][T14962] Call Trace: [ 1125.023181][T14962] dump_stack_lvl+0xcd/0x134 [ 1125.027771][T14962] should_fail.cold+0x5/0xa [ 1125.032277][T14962] should_failslab+0x5/0x10 [ 1125.036778][T14962] kmem_cache_alloc_trace+0x57/0x480 [ 1125.042060][T14962] ? file_has_perm+0x25a/0x340 [ 1125.046822][T14962] alloc_pipe_info+0x10e/0x590 [ 1125.051588][T14962] splice_direct_to_actor+0x6f1/0x8c0 [ 1125.056957][T14962] ? generic_file_splice_read+0x6c0/0x6c0 [ 1125.062671][T14962] ? selinux_file_permission+0x36/0x520 [ 1125.068213][T14962] ? do_splice_to+0x250/0x250 [ 1125.072884][T14962] ? security_file_permission+0x248/0x560 [ 1125.078599][T14962] ? selinux_bprm_committing_creds+0x6f0/0x6f0 [ 1125.084752][T14962] do_splice_direct+0x1b3/0x280 [ 1125.089601][T14962] ? splice_direct_to_actor+0x8c0/0x8c0 [ 1125.095143][T14962] ? selinux_file_permission+0x36/0x520 [ 1125.100689][T14962] ? security_file_permission+0x248/0x560 [ 1125.106405][T14962] do_sendfile+0x9f0/0x1120 [ 1125.110912][T14962] ? do_pwritev+0x270/0x270 [ 1125.115412][T14962] ? __context_tracking_exit+0xb8/0xe0 [ 1125.120872][T14962] ? lock_downgrade+0x6e0/0x6e0 [ 1125.125717][T14962] ? lock_downgrade+0x6e0/0x6e0 [ 1125.130560][T14962] __x64_sys_sendfile64+0x1cc/0x210 [ 1125.135758][T14962] ? __ia32_sys_sendfile+0x220/0x220 [ 1125.141041][T14962] ? syscall_enter_from_user_mode+0x21/0x70 [ 1125.146928][T14962] do_syscall_64+0x35/0xb0 [ 1125.151342][T14962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1125.157232][T14962] RIP: 0033:0x4665e9 [ 1125.161118][T14962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.180719][T14962] RSP: 002b:00007f46fcf35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.189126][T14962] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1125.197088][T14962] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1125.205051][T14962] RBP: 00007f46fcf351d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.213012][T14962] R10: 0000000100007800 R11: 0000000000000246 R12: 0000000000000001 [ 1125.220975][T14962] R13: 00007ffce97c605f R14: 00007f46fcf35300 R15: 0000000000022000 08:43:58 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000ffffff9e1c00000019080001000000"], 0x24}}, 0x0) 08:43:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008880}, 0x80) [ 1125.299150][T14956] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 08:43:58 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = epoll_create(0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)=0x1) 08:43:58 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000a9f1c00000019080001000000"], 0x24}}, 0x0) [ 1125.563159][T14995] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1125.642429][T15000] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x17}}}}}, 0x28}}, 0x0) 08:43:58 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xffffe000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0x1, 0x5, 0x1, 0x0, 0x1000, 0xb683, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext, 0x1, 0x3, 0x3, 0x3, 0x2, 0x8000, 0x7, 0x0, 0x6, 0x0, 0x1}, r2, 0xd, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x30b042, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x0, 0x3f, 0xff, 0x0, 0x7, 0x8c8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x1f}, 0x50400, 0xffffffffffffffff, 0x45f5, 0x4, 0x8, 0x2, 0x9, 0x0, 0x1000, 0x0, 0x3}, r2, 0x8, r3, 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xd, &(0x7f0000000000)={r6}, 0x8) 08:43:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:59 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000fffffff01c00000019080001000000"], 0x24}}, 0x0) [ 1125.994031][T15019] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1126.109167][T15029] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002c80"], 0x20}}, 0x0) 08:43:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) recvfrom(r3, &(0x7f00000001c0)=""/243, 0xf3, 0x2082, &(0x7f00000002c0)=@ipx={0x4, 0x1, 0x3, "b11cbf64fccc"}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x1, 0x8, 0x558a, 0x0, @mcast1, @local, 0x20, 0x7, 0x1, 0x1}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000400)={@mcast2, r4}, 0x14) 08:43:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000200)=""/166, 0xa6}], 0x4, 0x5, 0xffffffff) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x40, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3feb427, 0x81}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:43:59 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:43:59 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000088a8ffff1c00000019080001000000"], 0x24}}, 0x0) [ 1126.300539][ T37] audit: type=1804 audit(1629276239.386:1434): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1874/cgroup.controllers" dev="sda1" ino=14904 res=1 errno=0 08:43:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x4024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1126.479577][T15051] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1126.611892][T15063] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:43:59 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000f0ffff1c00000019080001000000"], 0x24}}, 0x0) 08:43:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="4400027a09477437f92cb9710dc6fde0890fd6e23d2c8a9025da1634311d85da3e337575c4207ccca5"], 0x60}}, 0x0) 08:43:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:43:59 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1126.866301][T15074] __nla_validate_parse: 21 callbacks suppressed [ 1126.866319][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xb4c6, 0x20}, 0xc) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x8, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x719}}, 0x200, 0x1, 0x7ff, 0x187, 0xb0, 0x40, 0xa0}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000012c0)=ANY=[@ANYBLOB="01002a31020000574c9ffc93ae06d215fafde663939433f434fe00117a938bc8ea3445fc71d4cccd19b2bda9d5ffff4295d78f731db2d560bf48694c03f760e053a69bb4e7d368c9f038057341c84ee61b3c81b070e9ecaf90ceadd7b6de2e0383ca5136dd4b0462d4b386e9627e0fca890f0b13c8609df8fe4d6fed2fac2cbd6b0b8cc29cb40bb03966c39a0b962788b3ce598f92a449398248f80eb10f58c382", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r6}, "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"}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) [ 1126.945084][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:00 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000007fffffff1c00000019080001000000"], 0x24}}, 0x0) [ 1127.062159][T15091] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1127.112219][ T37] audit: type=1804 audit(1629276240.196:1435): pid=15086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1875/cgroup.controllers" dev="sda1" ino=14910 res=1 errno=0 08:44:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="51e58000947e6626f066e3cb4498d60f07848ab04629a546a04c7b681e706a2d63db3f0d30c9a1e65d2ab2dda3ef5a7cec647ddb1a48c840c038983e3512c866591b0743aca1b7109d05500fac0431e8ae190a2aeaf452674d3cbb5e2f5e09412674a11dfd3fb2237dde951de7c515758aab8e86b3c083549a05c93cef2193d14efa313017e4bacce42073df3cc5bd679f6fa941a6b2044fc5545e194c3832850b9cc3e85e29792bb5e9bca1771ede7733d43ffec85f34b1ab51d17555b87673b03a9dfa03775db2c3de92e94b4d0fdf489681", 0xd3, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x81, @mcast2, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x4008000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1127.172269][T15088] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1127.204684][T15088] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 [ 1127.233841][T15098] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}]}, 0x24}}, 0x0) [ 1127.292030][T15088] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1127.313281][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:00 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000009effffff1c00000019080001000000"], 0x24}}, 0x0) [ 1127.337578][T15088] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 [ 1127.354091][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1127.488808][ T37] audit: type=1804 audit(1629276240.576:1436): pid=15086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1875/cgroup.controllers" dev="sda1" ino=14910 res=1 errno=0 [ 1127.571491][T15088] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1127.605743][T15088] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 08:44:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x20050000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r2, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7682}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5e}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x8008) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) recvmsg(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000001640)=""/210, 0xd2}], 0x5, &(0x7f00000017c0)=""/54, 0x36}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:44:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007802) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1127.641205][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1127.664028][T15088] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1127.689039][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1127.706777][T15088] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 08:44:00 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000f0ffffff1c00000019080001000000"], 0x24}}, 0x0) 08:44:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d3000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) 08:44:01 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xffffffc3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1127.989426][ T37] audit: type=1804 audit(1629276241.076:1437): pid=15131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1876/cgroup.controllers" dev="sda1" ino=14660 res=1 errno=0 [ 1128.066665][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1128.135072][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x84000}, 0x44) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:44:01 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000640)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r6, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r7]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r5, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000002c0)={{}, {@val={r8}, @actul_num={@val=0x2b, 0x4, 0x43}}}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getneigh={0x28, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0x410}, [@IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004094) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0ee437d633d9aaffb6ccf8ba141575116c0cb91d0db0cd82efacb111ef581378afffa0144e4b277a56ffc22b8eec6afcff988f5b2e33a137bc014f9062b98ce3c5611ab5e600004c55b2be611876aa67d7ab3b6a27b5cc1f04e2ca8ec4255b097fde16946feb130ba3ca5eda214a702fbc239ec25772550860aa4e57f24466fd10d53f7e5b4051d1738f9906225b819831d211744d1578252f6296dfaa90f2cff35246d02abafefb6f79f7714617a2488d6a36314c8b446243368e028bf2cfb877adc8fe33d340a7a8e86a4728ce304ef4257c8ffe17af6f65cdbec0802df5aa03b7fa971012ddd3343f47c96449", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r10}, 0x8) 08:44:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007803) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:01 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000200001c00000019080001000000"], 0x24}}, 0x0) [ 1128.492276][T15163] device lo entered promiscuous mode 08:44:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00722260462f599f00000093ba1d59a693912ba776a6e5f9ce97a15e5e8a1bdf26a4874022dfc495e32b0430", @ANYRES16=r2, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1cc, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x801}, 0x4000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYBLOB="0100000000000000000025000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e65746465760369b5e33be8cf8e20ea576d30000008008c0200000000"], 0x60}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xfc, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x2d32}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffe7ee}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7200fedbdf25060000000c009900010000006f0000000a00180003030303030300001000178004000500040002000400020028b8178004000200040006000400060004000200040006054c000600040002000400050004000100080005000a000000"], 0x6c}, 0x1, 0x0, 0x0, 0x30044840}, 0x20000010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x0) [ 1128.621599][ T37] audit: type=1804 audit(1629276241.706:1438): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1877/cgroup.controllers" dev="sda1" ino=14178 res=1 errno=0 08:44:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0xc04, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) [ 1129.352388][ T37] audit: type=1804 audit(1629276242.436:1439): pid=15178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1877/cgroup.controllers" dev="sda1" ino=14178 res=1 errno=0 [ 1129.380168][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.389650][T15176] Y­4`Ò˜: renamed from lo 08:44:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x200c2001}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000bf5cb894ecb6ee4799342e", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4040) 08:44:02 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000300001c00000019080001000000"], 0x24}}, 0x0) [ 1129.406219][T15162] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1129.414242][T15162] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 [ 1129.444860][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:02 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xfffffff5, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007804) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1129.556697][ T37] audit: type=1804 audit(1629276242.506:1440): pid=15178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1877/cgroup.controllers" dev="sda1" ino=14178 res=1 errno=0 [ 1129.656747][T15176] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1129.656761][T15163] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1129.656783][T15163] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 [ 1129.672891][T15176] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 08:44:02 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000400001c00000019080001000000"], 0x24}}, 0x0) 08:44:02 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1129.792803][ T37] audit: type=1804 audit(1629276242.876:1441): pid=15213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1878/cgroup.controllers" dev="sda1" ino=14145 res=1 errno=0 [ 1129.901654][T15162] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1129.926837][T15162] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 [ 1130.073752][T15233] net_ratelimit: 8 callbacks suppressed [ 1130.073769][T15233] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1130.101752][T15162] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x6c000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x62}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x850) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa76}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x48040}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1130.127563][ T37] audit: type=1804 audit(1629276243.216:1442): pid=15213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1878/cgroup.controllers" dev="sda1" ino=14145 res=1 errno=0 [ 1130.203834][T15162] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 [ 1130.255521][T15177] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1130.263678][T15177] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 [ 1130.287687][T15240] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1130.314998][T15162] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1130.323023][T15162] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000d11dde16 08:44:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:03 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000500001c00000019080001000000"], 0x24}}, 0x0) 08:44:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007805) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x82401, 0x0) [ 1130.536141][T15252] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. io_submit(0x0, 0xa, &(0x7f0000000bc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000d80)="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", 0x10c, 0x380}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="93c0406f8253017a12f0ac1e6229901f7d878e6efb8e49d9f6b8ce4c9d6fdfb7778e92a9517d2983b9e3a3015c910f2759e9e83d25089676f85198111229aefed6452263aa503cd2bbf26cd9a4b059f0ec204316111cb5712663870506b9ec455ece84480f2f8ccf175174a6586baf3db44a28eca577b2a9b11758a118b14d522bca2a3e45c0fa2ee15eea28bcfc25e2f3ae8ac407d169cc02d5743852856a9bda24e36f5273db5738e5987635d951721e249aec9491c83077740afadbe510ecb77fbae4a515f60b1534fb65d4e247f66c4cc11ee86089197db55072912e6cf71cd42297fb", 0xe5, 0x10000, 0x0, 0x3, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="c64d88118500b9a955ec511bd6b9704ea0c6ba8d3cf0e3a0cfed1e4bca2cda164615f906cc4e01d602495556f6cb8426645e93851cea37fb75148ab78ea1487cc89de2f9215593013683208eb53d307dd256323e41f0dab44a8e1a2fc4b94f6dd6688a8ccd600fde98f38e439d03919e40140d3ca702428c4af13f8bd1addfaf8cb519a1d6f88bf4e5bb5583be336cbaa3318caeba0b4afa72efd8c6cf07", 0x9e, 0x7fff, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000400)="f5f3236ce6502422e8ae520cb5", 0xd, 0x8000, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1005, 0xffffffffffffffff, &(0x7f00000004c0)="a966601971124e6f7713e18ccc48b14b99fc9c09cea733d8885cd1cde46f168aa59981df72c1c42ce42dda9bf00fe00bdab40fed120050e9b3998ec04cd5b6372762b61b9827291cdfd46b33fb34a8859e1ca30c18f52fb7ba2a665060177161a236fd8a4c104195e7713e3ba2fe8ce2e286020915c089c91abc7b99ae9a25b57eeeb267f18d9ab154d30e36433c456aa4", 0x91, 0x4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, &(0x7f0000000600)="da89e9fb79949c7e5855b2874b0e053be30e48faa228083e8397d457cd19bb1a78cf8cd7f6aeaf6bba8ec5ec3a4d454cffd86b9dabd27e670d0d66bf7d1838fc754c2b7830e1a4ac103fdc834425c7632a2d32bbd2209d9a06efe0d9e74d9f51a54052b97b764f3766085c0b74fb87602e6176e102e8414f35c6a37bbba577cb28356faadfd9f07c0d7675ea458ca90c6492489fc5dc196928a78e251f08f99b7b430ce980bbaad300fdbd7d200e9437a3500546e003b1c18bd693b9a35cdef6cd9de3380a85b22713232a3b18c09c50317755fa2a0de2d49adac9fab1f7", 0xde, 0x9, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000740)="a84bf99e07e0ac3161d42f5000130ea1854b40b0d79295244590c988a4d78eaa2421e0bf119795a1cc2a1b9b565aa1d4a335ab730ee5f91ed5bf335d15b694fe1def668793ec11ad1820b4dd1e9fdc374d99914309c565774effa294812276cbcf5853eb605fbf4a940ae058b7f597ad0e50fb737086297b8e6f5dd32b0910b4af648c77a8baffdeba47beabb36020fa81904ef70ac68ef41d6ac48e", 0x9c, 0x7, 0x0, 0x1, r5}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xcb4, r2, &(0x7f0000000840)="1c5a4b03f2ec3b941211495a817ed0f7972e9d87dd6ea05dde291f87b8533da00b0b1b48d57a0a1cbe1ed5b014d9ae667f4961fa3b036f3aedab2784dbe3bc74eb6974644567ce6a05ed46cf6b0230e44107a5d6e49d3d8dc1d50fd0224a2fdcc3abc905bca7938837fd74cba9b93e16a64d471770bb6d8182bce723e6caac1eb52e5b3a90c9592c872034e2ab6fb57a7520029d7bf13664", 0x98, 0x200, 0x0, 0x1, r6}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0xfffe, r7, &(0x7f0000000040)="533c424798343367247812c52bbbe3e432b2a1db48bf507548db1d02ce59fbf9ab692c75f79a0965249a3f70763450d337104bef691d2263644fb5b529e2afb4ead2271300"/84, 0x54, 0x8000, 0x0, 0x1, r8}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000a80)="dd8042f59f38341bbc5be96f0d0bc577ea326d5814394737221b7f3f1e84b7c07d3187c0095c596ffb7d73eb0f40ac409672428f5568f0fc8d75ee5c29409b8cbdd4aa51a73f6240c4dce8354025c6f1db55c2ba756a9dbf0003bc565262a710155e6af439907865c420e4a1b4f9567b6e65ab5a01470e2f2f0a82cae53b786cf781bf098f7e51f6f5af8cec5e428e5aa794d484bacd064c95e060f702739a593187df0dd4c4ad6375976bacc959e8bbdfb2eb1139cbc7f698313f4b46b5318798240b7729222c89dc358fc4b79f", 0xce, 0x3c, 0x0, 0x2, r1}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r10}, 0x8) [ 1130.613128][ T37] audit: type=1804 audit(1629276243.696:1443): pid=15251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1879/cgroup.controllers" dev="sda1" ino=14290 res=1 errno=0 [ 1130.635237][T15259] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1130.741078][T15257] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000021000000f5900300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x302, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r5, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 08:44:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:03 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000600001c00000019080001000000"], 0x24}}, 0x0) [ 1130.783228][T15257] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000004d07966b [ 1130.876083][T15257] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1130.884120][T15257] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000004d07966b [ 1130.916935][T15267] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1130.987608][ T37] audit: type=1804 audit(1629276244.076:1444): pid=15251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1879/cgroup.controllers" dev="sda1" ino=14290 res=1 errno=0 08:44:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007806) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x48500, 0x20) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1131.082356][T15277] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:04 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000700001c00000019080001000000"], 0x24}}, 0x0) 08:44:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r3, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x2c, 0x0, r5, 0x14}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="7365f2e73161fdb2d8c38136a52b055ec8c9ab7348392d99a3b2b4a6aeba1a581a6c12f1d0b45c07bf96c5f4ad57bef65bdfdcd6e6161b57f71dc8c616cac375cc5d2e12727cd9d1b661fd6a04508b34b954e8da27a50dace1600449a2e00edbf491c257f3e9ba0367ea57e0af8066d2293d2c7fffbcbac93d3ebbce482588657d3bcc2f1e27a5947130ce98a9296b1e5581d05602cbddcd72567a3d34669a0102d14da8ac9db10fe0001ddf4c4555c80a1c37cca9024a4559e74a9994db0e84ccdc015780722c88ab2809bec93363f51e1750c0a4b305d3cc71e9085e16589ab944d597f568e330b6543af0ac16b45d87", 0xf1}, {&(0x7f0000000280)="071dfbb3bd4f130b1c765292c8c352fa58dde3dc3e9cc579fc2bb03b34071c4f360f903ad53251da5b4835dd443d8f42edc0eb0140333cda3fc502bd30337e8b4981fbdb86c09e45e69719f4dd9fe3f1621b6856ddbb1b35da635640afce", 0x5e}, {&(0x7f0000000300)="3d78838fd25c756cfa8737c22dbb741ec89bd6ed761040ee74b5b82f68261bfae14af4cdb97ddade229b97c0e6a850237b77bf129f8af3c43e1069c2e8f98307eff330581c062b2ad16d62d52d9ff885091a222d27197622f82cc20fe3b6085d4499e2ab77e85d493e46272288c59816847a1f58636a4322a6bed7a8f1a4286c882963049b8943b53983899110e682cb485ac98caabd38d337433c2bd50746fa", 0xa0}, {&(0x7f00000003c0)="e8cca28a4e9d1e7272acd7c621c641f7150cc42b86c6fb62483f0b6f20790e522548a18c0eac438a406f87cfe275cd35ac23278bc4a9beb76e37fb977bd0b82dce58", 0x42}], 0x4, 0x0, 0x0, 0x1}, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc04732cef19f1718c14656c000000", @ANYRES16=r1, @ANYBLOB="0001040000000000000021000000000099003f0000007f00000044002c8008000000ff0f000008000000f9ffffff080000004e4e00007dff0000000000000800000009000000080000000100010008000000050000000800000004000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000004c0)={'erspan0\x00', {0x2, 0x0, @empty}}) 08:44:04 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x2, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:04 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000800001c00000019080001000000"], 0x24}}, 0x0) [ 1131.287162][T15284] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1131.304005][T15284] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e65bc709 [ 1131.355530][ T37] audit: type=1804 audit(1629276244.446:1445): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1880/cgroup.controllers" dev="sda1" ino=14067 res=1 errno=0 [ 1131.418376][T15294] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1131.482156][T15284] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1131.500893][T15284] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e65bc709 [ 1131.528967][T15298] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x80000000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:04 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000900001c00000019080001000000"], 0x24}}, 0x0) 08:44:04 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x3, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1131.850942][ T37] audit: type=1804 audit(1629276244.936:1446): pid=15292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1880/cgroup.controllers" dev="sda1" ino=14067 res=1 errno=0 08:44:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8048) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffc37, 0x34}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "18302e2f9372d4fc100996f6b0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 1131.905633][T15318] __nla_validate_parse: 15 callbacks suppressed [ 1131.905651][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:05 executing program 1: ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x1, 0x98d, 0x1, 0x200, 0x3, [0x101, 0x3, 0x1, 0x6]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x100a0}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01c47200", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007807) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1131.995289][T15320] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:05 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000a00001c00000019080001000000"], 0x24}}, 0x0) [ 1132.082638][T15326] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:05 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1132.232505][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0x1, 0x5, 0x1, 0x0, 0x1000, 0xb683, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext, 0x1, 0x3, 0x3, 0x3, 0x2, 0x8000, 0x7, 0x0, 0x6, 0x0, 0x1}, r6, 0xd, 0xffffffffffffffff, 0x0) fcntl$setown(r5, 0x8, r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1132.271202][ T37] audit: type=1804 audit(1629276245.356:1447): pid=15332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1881/cgroup.controllers" dev="sda1" ino=14290 res=1 errno=0 08:44:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x5, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="f9362c05c7154b623d3582fbfa4f8c431c36b5d455fcc3b0be070ec3467d41f9ae0112789f861bbf518a319678668f680776e652403be8d3b810207b6836d8eff3eed2f1642a2aeec4846b6ded784ce0ab84ceb93a5774ff41605e2330df8e2c945a24b5f681a055963f562934671eb26af857b6d772834a01075db01722b3ec23ac77fc7767f641e5348a68ccfeada48fd351165e89c86f83577a0269852bef30", 0xa1, 0xf6}, {&(0x7f0000000340)="c63439f6af69d21c8a8a8157cff9ef2af3517525f7f4849f9b7462fcb4ed454cf37863848a9e2e5889237fb890d8faa346c3376629d4883510a0a35a71ecf2c42d4cd3a762cfc2c0fb79dc0c6ca830c547ece4fa934817056ef03ebebc860f96086aef055677454f2cd59d64b515efa8d7e4b1853b2859b7815fe701a31ecbb937c367eeaebb7339dab5849c010ce2e923a59aa1d67bfbaa489ca725d9bff7cb21a04ddd9ec69b9e70d7", 0xaa, 0x20}, {&(0x7f0000000400)="48ae4e78981212b2cdf5062ff2f953e68d2aff16c73ee26d31a748039f4d13b9452bcf12533d4a407382f4fc747f5074ef1473a08f2974f247106e0b104ecff689400ebcbf0281aad15dc57f8ded70b20864c83d2f9416d4f9fecf0d7f5e4aa5628b40e50209e3ccd7ee8beb16", 0x6d, 0x2}], 0x2002000, &(0x7f0000000500)={[{@usrjquota_file}, {@jdev={'jdev', 0x3d, './file0'}}, {@balloc_hashed_reloc}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}]}) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x40, 0x46) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x41000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x18, r1, 0x20, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x18}}, 0x0) 08:44:05 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000c00001c00000019080001000000"], 0x24}}, 0x0) 08:44:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:05 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x5, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1132.644109][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1132.702477][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1132.740951][ T37] audit: type=1804 audit(1629276245.826:1448): pid=15332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1881/cgroup.controllers" dev="sda1" ino=14290 res=1 errno=0 08:44:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007808) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:06 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="a93d63bae228f0f5815371e054d3dbb84b4d1cf615e1de66d17c66553cecdeeffc5a1cba51430e25f6287c6ef66f605d43bdaf5ba6743b1b84b847f486dc7c6ed7625a27c9bc7e66ea42cb72aaabf26eb50d07da65866b16887434d567136a301f2bb2a03f2b7776a204b415d3fd4a63acc2746de5a5ee02f5518c252b888c9abe47373b3e62abd8c446a5370e7f68734254aa094a9b20e44182619e7fe279448e32a5592298f8d94bb9e730187f068ff2a3a7273fb52faf28c0b7787caa24b15642713661b4ddb7c1012accdb3d41a1a9b91fc167913d2bcefeb7f24f807251bda0", 0xe2}, {&(0x7f0000000300)="a8b7daa2b59957fa174c33a4ba8ae00ba4e55ba49fd167dc578ae8ec1a57d60ca82d840c11f22380a038a1248caeb19e34dd902dc6622f91598134b693a4216d9d27fc6173d47569406f0ea343e8682779c1a9f1e284ce860ce1a777baebb6d47e1d0d0096e9efa3ee1521e0d4f9c8182d6bc869d403025f4fddc92ca93a5626dc4932e8e1ce2e9879314a49fdd0c88dabe030d3d08355b93e639e04839c886f3d62df052c5075b4dc5ada00257ea2732f0194a3d00a", 0xb6}, {&(0x7f0000000140)="8eeb1e99345859798af79ff37dba6e1e07fbbc5b508aae41023c03e307284e505efb67d05f106b1dcee9704169b4baa5054eaf334800fd", 0x37}, {&(0x7f00000003c0)="e67f", 0x2}, {&(0x7f0000000400)="6781d1312fe19a7d9bdcdc6b0418eed6ff510fff36bbb962343e818e5caa5b5c2b699c4a8bf0022ae55926247a7b4a6740bd96cdb2b5e1c38dce1edc01d8298f78ff0998c1787bceea70333cbe61137457dc2fe13a7bc8244221598bde837f4dc9c84bbc6e437231df8cadbe5e1e48ee8a6478a0d28edc316ce6173642959925d4d0bf5e438fdbf10923ed1bdbb458d63a08281748a04f3704431aaf4e370b1b77692da566b8210c9cd1d7584f3e79c4199ca75bb4de42fdab59e6974d20d751304a313c5a4c485ff295ebd76f42b444", 0xd0}], 0x5}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000005c0)="3fc495e76e8662a8684f488bb7b18138dac326dc382b369d801d5fcca298d15044df41a490dd515a0e8a3a768dc3db62ba5b40f1b230b8599581e6dcf3f8f58bf114d93ee81796", 0x47}, {&(0x7f0000000640)="2007cdb366d119a9c2b782e00c0b153f31f4b1b193e6a89ad02baf3271dc1dc40e25357d979afd6d06474e4e17173a304c90c6fa9f78725193f8a99a845ef1f3292866153a5d76f54b0df42d10ce9951b37e0a46b1586ebfbcbb690eed5e01a48e83c4a04b8b850d718dcfdf9bcd45c3badd1ec586a6c11362476ab3c11ab8597d803cc4c567512a0535236575cbbafebfda71a1042186d2ed347b9a7628f879f43a02615fff239924f636893c97568b74c40db2198937b88e5964ad83183825ef8b721b7197213fe91489e2b5633d0c1f532382e90f24f85d5b3492a5c1941f11dd8711b6d84b003a912f3f1f5397116d419edb14395d222c9f011d4d864205c35090ae9dfbdaa047213ee5a721a32b0ec3099d1be8a34ad8a352ff7ce9e881434ae287b1e5f6a8d18be41166af5dab20b98091a8003748f8f6497834703d5faac8db2d3b5d0f3f0349da6c28527dcef40152f68e3a660eb6c488c3188001d61015917f9d8e874ff937848e500eb88d821103126a14d6427bb4ff00be277b0421d9250c4fea1f62e6f1249b20a732ef9c121a62989526b06e9411156e99b8d6da743348dc0d4a9e1a8d83b39fb943a7c72b461dd8c82dc800dc1843260d6fafdbb33dd2ccb630936c6d9c6258dcffd0721062c44bbcc85e9a355ce8d44b4f147b6208673f8f531e1ed1f5125735d400f2dbc256e906fe726e3622e665d7f8d8c9671cc374c8441bfe6ae5b8776d497d0229e5cdf5ddbf7087b6a8a18e1070ebb7c6748bd6f5acca2611ce889dfc06484ee5e2b3d7f5c4374c6168366c74399822ad7d5cf4635c7739aa2602d2c9f2243b9ec0d0b92c72e87eeb61700d6ee29dd6c2b5b9c7a7e328c639a595cf2ebf33cac1c625664628577ba869f56a6dd2c6b2b88e9bac6881dd8aca021617f858c794e7d4c585c23bb25a8f8ba8fa129a5c18022854c00e8b72bd63c222e308ea6b54e5bae4a04acc065a849b7012a05ed12a8ccc91a85ed69e55cfbbb4116bd02a8df978c3788ec993dad7215d7d11367c51afd4272b9ce7ce93be9bd1b48e490fefed030d89c6614152996c6b3a50aec83bf43d21550d9f2269a5c05e7dbc636c9cd719364cac81d374631869d0b093390875445764171ca88411985e05cb1d8f3fda485e9bfaee09255ba4734a321b1825d6f6988b23f5ffc97ba1878a0486a7dac0899195528689173bc8748814cfb574cc4c5ecb93cdb909bdd10991b099f061df5fd0a16af2bccb1839217eb7af027dac49770a5ceef9e25fbad0a5c819f380334a379be4b079d3d34237875558038f70140f2394023ffb34fbb4fb77e08f5d6af8b68f261c41374526daa2e5defa80e6645873289ac53ede12ec7fca2de0e22e9e37a67fa1515255d07adb8c6ff203b306c8ae97f1af84fe734104b000d38f6b126cbd524d5563a5d3096b6c6423832235e01ad3647ccfd64c0b257df776f4811216ea83d59fff82e9e66ced6b3e1fdaa9e6ec7d3fee4010c57046cf8005496b3990142d75b7dee0fa6ca955e098f2474287edef190cdb1a6efca91e320ef3e82ce09e8a966436eb61065f82dc500ef684fd5ada6d84f4fdf33fe1d192d2df5a9a423b8b03556fb25f5f19019b50b7d56b35c64d3419ce9aa1d61d8400fee85f60216dcf933b5b4b962745de603ba0fd8f3e9bf85be924fad51401797993a15041ce3c957c802a5da40822dd15b6511324c05e724fe27adcdaf5086218a8bc470bcb9f9c7f156ea8d47d595291e09971c94b9f275c2b1c556ce873335304d9d8798c8aea4a4b3e10a76d539f0c18d5b7c0d27b48c40ab826c7b61156d7b9083e07d62ae6dabf016b475fac834f2203c113ba74c0212b6fba36fa523d17f838989e2174b51019c5616e43817c4cd1b51e93652dfcfc097579b2aefbf364cf85f654cb4e4e316ba64786a94c58e76d02300982ee3eadff09f74adfc2c3ef7927282dd0aadbade2e70c66c3ef750b9b4724b2ff59573387670810652b3791da2bff340630b5575a75720eeb08389c25d4dff8eb4563ce5db6fdd2202bcc863afb298f249121827225ec6e5e29d02fee60edae0d61094f863efb6636b8bcce7696b0e4c52a512f1bfbb3fe59adb865965506bf16278d9662752878794673451113e3a8652f50a130ff5e8df43dcb36e375eee89c208c2946803ac4a3e5342f6a83ce6e4ff8978afc50df006a9cf051589f6d977bffc4ac189d1357c729da643150a1f8b93a161274813f341186c22f1bab3f604cb96565951839a373f3814fdc3dc78a50b77a5260af48831d1a6017e7f2bbd66e9fb2cb0042f353ab2743cfdbee1546f305c3ddac82f3deb7cd2e020f53d00e194ee9caeef2ad7cac93707b550681b4c72dcf0e12676175b9ba0bcf83226e8721f64ac13275e36eb8093b47900d00c09776dbc70548180332a3071c94317f27e9fffea57670182c5030bba20e48fa2fe998655fbf389e5b8037540d854c01e6aa135f6bfdb59c8a1bddadb74ef5b5272de5bbc8f2ad0b4fbe58a6aee60fa322435e8b3ac62ad5738e6db65fd733b6bc24329d0d54a32543e680faea807da78ecdc2487a04d92bd409cdb4990da0ab3836177eda1ac07291b119babafda21aed98e196422ecaed27a745dac609f424cbea3603b1a4a5bfa7f612009a2593fe9906997c850a8677fe9574f2192026fa9200557971cc6b8952002f7665d29d01d0bbb326ef4c67b8ed30f4e4273ba7f1f283cf5e03904f60f1fe29e042307399e6e1c329d9848b1a1070ac1edb5479773ad57027b6687afb8cba10f0a84ac01782aed523dbd1fc93f8c6f5928144bc5f50d1c5ace08d82d6dc1cc53b57ea32fbfa8941ccedc6c7490386b7c82f38858008175f6bbae06fc48792547ad38b2deea16c90b4187fef7f2c7b8adee1aa0f9ec8b365e0fe5fb398339d5e9ca5bfc5e1c31e2e81244b4f095bfca34f708131626db91ff16375b8d78482c2324aee1360c160c4ade04f4339ebd7245fcccee14b801de982c6418d57e164737cbd3bf8dcc1ec76604932de69628c2a416a1df3024d929d2378d5ea87e19b85c54bb98dbd7591c502920fe0c3507bdb93a7b67496bb0ad1c59a708c9cca74f32400d37a083eabe935f31bc9f3d3e48079bc7ff8feea9d5b158989cc0f372bd1c306cd0f4fe5d9883b27f85bcea7b3fddfcc975f060a8772b3d05dc4da4ac5f5f7a2d515cb799eba8f9ad33bff836f8c40905d6be6c2275850de55283c03bd92864c52a70da1ff62219d2fc4de7c90cd9b0be18cee85174757b96198f2b2cf83a672132a3787c7b20a566e78dfe8635801abedbaf4cb5c848d405de9ab899350b0d5bd83180c81188aef191242f3622f7a8140a33b8da61b8d9f8e5b93f7447ed245db72048fdfa92349f01700e54f1bd254f1f2b500f38984b4ec582150e38615c2e8c482d010db18285200be91af4f1ed2ec64c6f48c109f1d528172746a3695914ad1622e9ca014f4655eb3430f4eba2ef4f846f375af9ad999da70e9e6e51a9e507e9204841ae0200f00cba4ab1debe32cc7a1503b53fa089381adcfd62963b269992fc2beae61003715b10b3fa91d324ac6074e48fdbd20ea342cfdac4fce7103f752c7865032d46a6f38adafdc6edac6c9e1e312261889182a50988d8176e5cbf80f9c5b3a2329b5f490b9a86204ea2f727a084d749398d94554fbae9fafecdde9b47d0c28715408a6ed32405c80e95b3d8c2f6cecd26b5edd99d547dd0305af2e45a71d5a330d8f0d870e81225f7c55793ab7f4bfa783fc894a9d44ecc09219d2b5d32e75adcf04f5b41df332f797f34a323bef023e8ee029854153e19a0de64c2526b83af1ef618c6d4998c902647396517f181f675681bc3f18b78b0cf626d0ba3269d5f8cdb8033dfc142850379252cb24a2a793b60a97e266297169a471ea3d33153de509e856d129aa6ad11a26ff5439938449d28cd3e025fe64aaf0ad5205b3377ef1d9e9dd08117d250b4e6901e1ef239bdabba079a7637f73e23cea15afbb6b4e4d10e4e7d104966d4e0e45d203970e0f0a80ed8f3f55af9f05d900faeb19c3dd0e67d3d9c8c388ef2f0d58c3abdbd65c07c77c45a9aac5c6a8d29068df8b918d8a022f3d5a2aa3e3e8e5929db45cef751394a581c05792289572a78c01016aff1616fbdb72aef64697ae4d0e9d1258bcb60ab9af7f476ea408b51a0b57b3547af158a0231ce770cd63dbb121d9cc4146da7f4af483b1c76b0fddd6772530293c68586d81a28f3489dffde8dbd1aebcee89e525da5320832aea38fc1423dcffbad0e5b7c92891b64843550837deca43b55b388b5acb3b5f40fb1ceb882ef1daa878ae303f17ef74b8939ee9f3457a62d2588ab459c7eff698c45bccfb06650904bceabc6c1d52816a570f048c66ea0e6656e19192b6a72efa1fb7a87494c245700f42969f9a7ffeccd24fa00748341681fdf99b00d6751356603304aa8b312c09317136b4f2598633a16e9b724cf1b1aa16a32c7fd5e7ac19c9b3dda2391096129ec989353b68b99613c5e421954e75fd97f05b50d7204da6337598018caa3aca10bfb1a6e2bfa3ef8d63f2a63bc39f27e550353af864c474d3120af6c9f7277553698cd10305d427e86556112f1af0d0c064e1b71fe77bf41cf8d09eafff236abd8edbd9f847537bc1dd832e5012de3e49b10e3c0a7b7350552aa22e5e970434a4bcc4f9a4640562a56fb23c08471042fef96b7058ce7b80aeb96fa326af4f5b9f108df156dc1746cf56ae9820a80d9dbbc6819ed247c3ea0ec9f941bf7c28f46f3f3863bb6012ff1446b7fcae28478f429c1576c498e3a9bd80a1a5bb80b2075ae7d7a412549b1ea4c935e69aafcd06c5d1eadd1871cc696f8c844a2db73fffbafb8afd846c55fa280e86e139481fa1938b58c88aea08be7013bfcf3a582c84646bc923135f107db48b3843dd630641918d045a51a7864bc11eccd231cd512929148d90649b48ad5966afbf52b86c3b09f8eb4d28952d699a8ff158129a1907e6bb405466162e13a369076db007bcda74773e5a2167ec5b30dce9dbe1a48cd096e9d42b247b49d62c064b7cfaa0dddfb3efb048ab6cd0153f7be6d76d3183799a6b7b0eff8c585a7e96954051e29dd941c5ebe112da07027fcc6bd1742063dd827290a930888f07401701d80b0231832cfb9a039f1ba10e1bffcfe6ee89d0bf3d73db2d6639517747a674e7201e520a910e409f9308ed5f7a71c43b4ca4b489f0813e083099dc24787318ea353c1d95e04b8d41a5b26675b1d0831aa47fb82fe4292af34789b6da0e111b080451d9297e006ca09827b570b0b835c475096c37b2c841f7b3d8db27ba5c9018c3e27767cc5694637811b511613708e9cfe9cb0a04922d27b5e22c412e7eb187a78897b1f7410c1775b3bc61883b6b9318ead2cd99251e201ac45679bf2382249e81cc7121cc24cd8fe9f01de836fd15732215304840c0b44d7f94b87a968d16f25e0243dd7c239bf57b8174534e344440754c5b681c9fe3296555c9e003fabbe4535eac8f90ae9b25a3d9e532e2465f6f0f37d63ff1f53e68a47d467dce3cd72dfecbceb9a9e334fce1b9ff30b74a9a976f79f21b1f00977caa4fbdb62909e4e359416f5071201050f484ebed72b4d8675d308dd518ae49a2b8b27abb69cd3142eb0efbcbf9a0ef8c2b32745bb0b6d688b658341055a47ef533465a39e59fcf74431031099da55a6880414ab33ea7bed003e23163575318cfcd0bdd1fe7194131ef8b5e965d5bb711bea19c54ee4e", 0x1000}, {&(0x7f0000001640)="0dfc1dc1651f76853071ecc17f48f61e2c635a9d806fc8a01017978cf5b4f2efaaf586ae5d8969d796498497f54fcde05d1f28348de94a7be92e486cefa0b00b65e8ff1dd089b1238e24de5abce54cfd50c1d2a677c04a15c186a5c9dedc607024f59664bbd3166f7a05ec7d5e41ff4cefeac5f03aa0ab38babdc264a5aa08b078653935b7e2c0543c3796c5f79b7d3449bbb80700127183adce8922fa7e054737c3e1e11b5099e0fcc402ee4ac0db99e15d896f1c4e6443c6ce7a8a50bbba13ab4c6ea7270629dda27a1acf97d6f4dbc1ea43", 0xd3}], 0x3}, 0x4080) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000017c0)=ANY=[@ANYBLOB="05000000a301bdc1ea1e6f88c151a340c899afae70f6523db9fd8bfd8961fd472cf5e02a2286f5526356df459c953347a3c8ca7428a5b8976957774c1a12d59a1ee9f7818c81c53999eb62b1565b43cc77bd17acf9f3962848bd5d2a0b35463c6e84166049eed4d01fcae9e7f0c79184a18f81a927ee7c5d2de245c2ba334bbc068c623ce992d263147d372a86a5881f3ff135544f7a98080bf455e25ccb0a3711ca90b1d757ea2977c74c8dd184deded163f3c754907c40f473c52ea7494dbad0126f204f7ead84f2e289439cb7617dba86e164f552db23e7e2ddd331646a2e466ecddd0943e9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x18001) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={r4, 0x7fff}, 0x8) 08:44:06 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000e00001c00000019080001000000"], 0x24}}, 0x0) 08:44:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1133.135393][T15380] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1133.143430][T15380] ref_ctr decrement failed for inode: 0x3620 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e4978586 [ 1133.147601][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1133.207650][ T37] audit: type=1804 audit(1629276246.297:1449): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1882/cgroup.controllers" dev="sda1" ino=13971 res=1 errno=0 [ 1133.211074][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1133.245250][T15380] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:06 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000001000001c00000019080001000000"], 0x24}}, 0x0) [ 1133.292866][T15380] ref_ctr decrement failed for inode: 0x3620 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e4978586 08:44:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1133.532451][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1133.599399][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x8, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1133.672810][ T37] audit: type=1804 audit(1629276246.757:1450): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1882/cgroup.controllers" dev="sda1" ino=13971 res=1 errno=0 08:44:06 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000004800001c00000019080001000000"], 0x24}}, 0x0) 08:44:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007809) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1133.848304][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x9, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1133.898816][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0002251ecdbfbd7000fe074ddf02a83a3377002edbdfd47dc9173277b6608a13257c00000008", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a00060008021100000100000a0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r7 = openat(r4, &(0x7f0000000280)='./file0\x00', 0x1300, 0x100) sendmsg$nl_generic(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1ac, 0x41, 0x20, 0x70bd29, 0x25dfdbfb, {0x16}, [@typed={0x8, 0x45, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x18, 0x3e, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r7}]}, @nested={0x101, 0x10, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x8}, @generic="58ed679739345c8650eea31264cd13a36551dca2459c0256970b75ade04a86d318f38e745db2cceb2026a0f75f8305324f3a4e4842b9051094cfc44ef696cee78ba4cf4982b3a0932869275d66ff", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x4d, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0xc}, @generic="f8f51c595783a7655faf41a4ab481d5714bc8e7087832e5e33ec31af58ab2fe1bcb3def6ca847049aebbc4415721005007f5b05775f0e9e0665f68eb01d23e5f02a11042ee2c0269199820234c6d9dc97f1bbddcbf5027298e9a32388a65beb89249ae601efb2998c33e74"]}, @generic="849312354f4f04a43d287090e136d041a553b829fcb0e8e56f5da7d43bc224335a29fbc5be72c96fdabdffd1e7ffab1581d77de47550415d214e8249609e169b68b833db1fce2a036566418d6d85c388bc3b371f91adcc955a14ed6efe6e405acec84510c8e25324eb9c227dce5ea463ad", @generic]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=r5, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x44001) [ 1133.999477][ T37] audit: type=1804 audit(1629276247.087:1451): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1883/cgroup.controllers" dev="sda1" ino=14417 res=1 errno=0 08:44:07 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000004c00001c00000019080001000000"], 0x24}}, 0x0) 08:44:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x8, 0x6, 0x3f, 0x1f, 0x0, 0x7e79, 0x54a4, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x300, 0x7ff, 0x7f, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x1, 0x0, 0x1000}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:44:07 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xa, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:07 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006000001c00000019080001000000"], 0x24}}, 0x0) 08:44:07 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xb, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:07 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006800001c00000019080001000000"], 0x24}}, 0x0) 08:44:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000780a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:07 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006c00001c00000019080001000000"], 0x24}}, 0x0) 08:44:07 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xc, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:08 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000007400001c00000019080001000000"], 0x24}}, 0x0) 08:44:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xe, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:08 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000007a00001c00000019080001000000"], 0x24}}, 0x0) 08:44:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) sendto$inet(r7, &(0x7f0000000100)="43af8614a21f9c794f7d7ad59586496d3fbda0a941165aa63912a61ff85c4d883a9af8056d755e4ed98c546ace2f3cc3bbd415b7cf3862bb3df7f8049dea6fa29f1ea979220654db916cbd871d3af24a57d7a9187678f7b88635e082dea80288cab443eba598d9c75d9f94a954099c7d06b5227da2bd9cbb16196f", 0x7b, 0x4000800, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000040)={0x2, 0x6ec9, 0x400}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r9}, 0x8) [ 1135.160820][T15458] net_ratelimit: 18 callbacks suppressed [ 1135.160839][T15458] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1135.272320][T15464] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1135.289126][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1135.289141][ T37] audit: type=1804 audit(1629276248.377:1453): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1884/cgroup.controllers" dev="sda1" ino=13957 res=1 errno=0 08:44:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000780b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x60}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x144, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xee0}, {0xc, 0x90, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xffffffffffff7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x904}, {0xc, 0x90, 0x23}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x231c}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="b00b21816285"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20008094) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1135.392441][T15460] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1135.428051][T15460] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 08:44:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xf, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:08 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000f000001c00000019080001000000"], 0x24}}, 0x0) [ 1135.498074][T15460] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1135.533918][T15460] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 [ 1135.622382][ T37] audit: type=1804 audit(1629276248.707:1454): pid=15475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1885/cgroup.controllers" dev="sda1" ino=14417 res=1 errno=0 [ 1135.629226][T15460] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1135.720795][T15480] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1135.759300][T15460] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 08:44:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20c, r1, 0xa63917d587d7df61, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1f0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, "66fbf5b803e7f73dcecaff38023e31f8d25f78bf857eac3231949447"}, @NL80211_BAND_6GHZ={0x88, 0x3, "37320a670bdeb5547cfd97f05f0b79b5ce44ab031df98ae213e9eb935603313c7662ea9e7b12a32d4cd262317802bbdbefc677f857883cb3619aab7b76e0bbeb981df271256446d019deb5eac4786125d70379107628c5d1a7dfdcf9de84b86277c2292ea9ad80817096d5aa6b59145041acc016af1d81e5bc3998118304e053a73c270c"}, @NL80211_BAND_2GHZ={0x83, 0x0, "15a57c5ede6b76f8de1145278176c32f0b6cb9fff99ea62b67c9f3a1b77a53e1e2c948e39d9f9c4cbaeff493ad233900f4d9f13cc4b76de3d27f78526c2fc72e9258b2f8f81a1d8e41679698f7389d7320bec2c2d3e5312d7645be584ccaa9e772f193159096f31f937dd55b55bceee3fcbc84435691f6fbdaaec8e1202c3f"}, @NL80211_BAND_60GHZ={0xbd, 0x2, "9a970fa86704b3ec26be010efa33a8cf14f4bf2ee2798ae212d785d7f3602a64bee17b283bc9526655155c48c3b4e06a04f1d2f3ec61319602565436d2e42892ebd15f8b255a75531c2698e8d5818e3432d9ec73df2ceaea27c81a4f2c97d8c59b23aeb949eb5bf702b05f62de03fda24906dedd3577ab285fdbdc8e407cbbbc76f9a7bdcb95caf9be54daf63bc4a1d3646c4adca2b4e64a8767f7a6854af4ce59552d714abeb4a6b5ffba7c48fcafe04415b75cdc6189c8e9"}]}]}, 0x20c}}, 0x0) [ 1135.830522][T15465] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1135.838431][T15485] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1135.849822][T15465] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 08:44:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x10, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:09 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000003001c00000019080001000000"], 0x24}}, 0x0) [ 1135.947094][T15460] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1135.971973][T15460] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000006447bae4 [ 1136.035105][ T37] audit: type=1804 audit(1629276249.127:1455): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1885/cgroup.controllers" dev="sda1" ino=14417 res=1 errno=0 08:44:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000780c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x324, 0x4, 0x7, 0x9, 0x2a4, 0x1, 0xffff, r4}, &(0x7f0000000080)=0x20) [ 1136.144210][T15493] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1136.217446][T15500] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:09 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000005001c00000019080001000000"], 0x24}}, 0x0) [ 1136.342248][ T37] audit: type=1804 audit(1629276249.427:1456): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1886/cgroup.controllers" dev="sda1" ino=14417 res=1 errno=0 08:44:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000d, 0x1010, r2, 0xb4533000) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x0, @initdev}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 08:44:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x11, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1136.399469][T15502] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:09 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000006001c00000019080001000000"], 0x24}}, 0x0) [ 1136.443229][T15502] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000005cf00322 [ 1136.648394][T15502] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1136.674173][T15502] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000005cf00322 [ 1136.739376][ T37] audit: type=1804 audit(1629276249.827:1457): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1886/cgroup.controllers" dev="sda1" ino=14417 res=1 errno=0 [ 1136.773371][T15520] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000780d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:09 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000007001c00000019080001000000"], 0x24}}, 0x0) 08:44:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1136.859219][T15525] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0586000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:44:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x48, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1137.073042][T15530] __nla_validate_parse: 20 callbacks suppressed [ 1137.073062][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1137.151914][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0xb6800, 0x0) write$binfmt_misc(r6, &(0x7f0000000300)={'syz0', "fecdf425847fb05907fd68190548da87bbd3b11c3e90d1dc53773a41765c8900b1c055fc2066767a3ed6630cc9a2cdfc94557a28d72e1791cc3af51b048058ce4b2f751207514c26de702e8177006fbdcec1c39a6bfbe3ed6704e8a14e6e1a07602ab2a0d14bdf79282fef6d284b7ca1b5f853af4ea6dc71ddadb7858dc46476b1d7fdd7abf9189449519a1f200ce736cb203147cc90c05cd62f6cc8f4e2cc0d624b980919a582ec28d074fbaaab6b1a0f71caa06aae5301b35ce66adbff4ae2b80b3c2dabb4e05924d72de1034ff509bd64516e4681f3bef8643ffa4306fec03f42e34b939bc454f1e14189115b9dd96d66810b26e9"}, 0xfa) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/85, 0x55}, {&(0x7f00000000c0)=""/160, 0xa0}], 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) [ 1137.240549][ T37] audit: type=1804 audit(1629276250.327:1458): pid=15533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1887/cgroup.controllers" dev="sda1" ino=14818 res=1 errno=0 [ 1137.274053][T15543] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:10 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000009001c00000019080001000000"], 0x24}}, 0x0) [ 1137.398513][T15550] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="9e359897dba002dbc41e6b4b459b2213246053501cabea789f", 0x19, 0x20014841, 0x0, 0x0) [ 1137.516523][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="01bbd042a3e9be5390d2725fe3f8ef4700000698ab2f2908fbe500", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@loopback, 0x46}) r5 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1137.570539][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x4c, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1137.615737][ T37] audit: type=1804 audit(1629276250.707:1459): pid=15533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1887/cgroup.controllers" dev="sda1" ino=14818 res=1 errno=0 08:44:10 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000a001c00000019080001000000"], 0x24}}, 0x0) 08:44:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000780e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1137.780621][T15562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1137.806937][T15562] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 08:44:11 executing program 2: r0 = semget$private(0x0, 0x1, 0x50) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000640)=""/212) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x364, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x4d}}}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="35a6c6db07cbde7e8f3773c50e75cac0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "910fec166dba5d49"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1191faf4bb5361d0de974a6c97179bc208da687f539b0dbad418c3ba9c330d37"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="33571a6bd4e61347f73605e0f26ec30c1894c2cae0ff8094"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "38c3742dadba201f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="41d384c5b8030a3d61a3e951ca23e3d1c93ee873f2098e89bfd61956a5762c9c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffb1}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "53ce7af85eca2fde"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d50dc9b337706fcc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6bd8df52d8d2a3f9ea02339d41e684ca4150b1aac4d4ed81"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2567079b26c9962a63922acbe621c09ee50ac78efa38764f8f9d53d82a4243b5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="306f7243cbc3be701dcdb89fe66aefdc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="50fa865fec14845e632411bc614fd250"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5da76f18e34c11f0e1bc6482174cb316"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1dde761ed1704aa9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="66e6968a5aac97a7ebf98fee89c64be7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1f1d46c517ec300495fde3e56350dced286902dad1e87c22a5b80a6aa2824c50"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0fc867846958207a4e7e7ff703ead11a04df541daf8883bfeff98a6890b35ae8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f52b7572b808eb81f726c709de04b6d40fd105a673d17c35d0f9b8a5e31844e1"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "45ceb01e46381c13"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6b7f2a485827e3e4eeb85a9419559549"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="79afa71c1e63d17fb2958a78e8349446"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1641a482f1a87befd2a9fc7e3b1823186b158cebe0fb4243703f46fd68bbb640"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02f4505e726f52441f07c725f21b2911a3182a50cd7d5b06"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="04c0f0fef812a7cd27e997d348779316a90e432d17aff90a8842a89c24155d72"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="59bce19bed3c9b3de7b11d5c97fc76c9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f7a105d2703a6dd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4cccf2a24c8620dc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "330317ccde71f76e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c7b9e1fd699178c482990b9558f55ff"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b1427f5ff8d99c64b0f9580700bb96a9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c7355829ccf4c9a0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f07fe3e7d6db325a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c1ce95ea60561df00c5fb5ded46058746f2fd1a1167093a87c53a7476dba75d1"}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) [ 1137.898233][T15562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1137.948947][T15562] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 [ 1137.983100][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:11 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x60, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1138.037967][T15562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1138.056416][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1138.060974][T15562] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 [ 1138.066953][ T37] audit: type=1804 audit(1629276251.157:1460): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1888/cgroup.controllers" dev="sda1" ino=14926 res=1 errno=0 [ 1138.135088][T15562] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:11 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000009f0a001c00000019080001000000"], 0x24}}, 0x0) [ 1138.180942][T15562] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000e67a90d1 [ 1138.311911][ T37] audit: type=1804 audit(1629276251.397:1461): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1888/cgroup.controllers" dev="sda1" ino=14926 res=1 errno=0 08:44:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20841, 0x89) [ 1138.369528][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000780f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe14, 0x7e}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1138.426539][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:11 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000c001c00000019080001000000"], 0x24}}, 0x0) 08:44:11 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x68, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1138.580332][T15596] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1138.596746][T15596] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000003ef1e26c [ 1138.647150][T15596] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1138.662043][T15596] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000003ef1e26c [ 1138.692193][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1138.741617][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1138.758561][ T37] audit: type=1804 audit(1629276251.847:1462): pid=15603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1889/cgroup.controllers" dev="sda1" ino=14926 res=1 errno=0 08:44:11 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000e001c00000019080001000000"], 0x24}}, 0x0) 08:44:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6c, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006b900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x1, "b4f29f4633a96a"}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xbc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2400200}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=r6, @ANYBLOB="2f03000000001026"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005be80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r6}], 0x50, "d3b4d17a800489"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{r6, 0x0, 0xfffffffffffffff9, 0x4, 0x8001, 0xab25, 0xc7, 0xe8, 0x6, 0x1ff, 0x101, 0x8, 0x7, 0x5, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r8}, 0x8) 08:44:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x98, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) 08:44:12 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000048001c00000019080001000000"], 0x24}}, 0x0) 08:44:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:12 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000004c001c00000019080001000000"], 0x24}}, 0x0) 08:44:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100a5fd77a35a3e0d4f3a86ecc3eb132abcf94fa8aaaf00000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000000)=""/43, 0x2b}], 0x2, 0x80000000, 0x2) [ 1139.439219][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1139.467734][T15620] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b373ebfb 08:44:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x74, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1139.536217][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1139.573684][T15620] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b373ebfb [ 1139.677802][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:12 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000006558001c00000019080001000000"], 0x24}}, 0x0) [ 1139.723698][T15620] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b373ebfb [ 1139.801254][T15625] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1139.847302][T15625] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b373ebfb 08:44:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7a, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:13 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000060001c00000019080001000000"], 0x24}}, 0x0) [ 1139.917052][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1139.950749][T15620] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b373ebfb 08:44:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000800000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}}, 0x0) 08:44:13 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x490800, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x2220c0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000200)={0x3, 0x3, 0x32, &(0x7f0000000140)=""/50}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) faccessat2(r5, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="71ce89506e4195dc70ed242d146a369c3e4f7624da557dd226250b7627f22b4177c49b8a13007e5d756002cdf6130b0e50d674efe1e1d5e6c9f0ad2100bfa2504885ca15ebd2d8559f9974dd5bd8ab1cbfb522e95a58174698e9a53e710915e000000000000000fe09e58f03aeb7aac16cfe1fdbb304fc9822f24ec72bd9d7c609aaeb16c5312e994feda9d73690f136ad50bd853a5b0bad8c18479aa19c0730fb2a2eef5e9e80bb53d9bb2299c61e4b86b82ebbb672405f53babadd314b44abd282a53664bed41f54891c4537bde9ba62421e433325b07a1957a88dc5c0c3888a3f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xd, &(0x7f0000000000)={r7}, 0x8) 08:44:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007811) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1140.228796][T15672] net_ratelimit: 10 callbacks suppressed [ 1140.228815][T15672] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:13 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000005865001c00000019080001000000"], 0x24}}, 0x0) [ 1140.346420][T15679] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1140.405001][T15676] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1140.425040][T15676] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009fcd6271 08:44:13 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000068001c00000019080001000000"], 0x24}}, 0x0) 08:44:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20800000f558d7ad80948999aad3dfbaf4751eeab3a017151fcee3b0a46f552633b74df9fbadd490d8182d7c23b4522638ce34881c5d1c89b08e8f5b1454b7e306d9ad098967be90848c528f64f90092449b29dc2c7f92847100eefd69d2c0de05f09ca510059f798fd2e6bfca8574f2524b8e9b5e7585d91a1179e017523508c72d7f9938266fc7f2e51cb6", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04042cd8"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:44:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xf0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1140.528798][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1140.528814][ T37] audit: type=1804 audit(1629276253.618:1466): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1891/cgroup.controllers" dev="sda1" ino=14935 res=1 errno=0 [ 1140.634468][T15676] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1140.642627][T15676] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009fcd6271 08:44:13 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000006c001c00000019080001000000"], 0x24}}, 0x0) [ 1140.755489][T15696] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1140.796338][ T37] audit: type=1804 audit(1629276253.888:1467): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1891/cgroup.controllers" dev="sda1" ino=14935 res=1 errno=0 08:44:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000100002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}}, 0x0) [ 1140.858363][T15676] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1140.887461][T15702] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007812) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1140.911489][T15676] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009fcd6271 08:44:14 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000074001c00000019080001000000"], 0x24}}, 0x0) [ 1140.955140][T15676] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x17b, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1141.007214][T15676] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000009fcd6271 08:44:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01040000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = dup3(r0, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc0c, 0x58}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24085) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1141.261808][T15717] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:14 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000007a001c00000019080001000000"], 0x24}}, 0x0) [ 1141.364486][ T37] audit: type=1804 audit(1629276254.458:1468): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1892/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 [ 1141.394618][T15723] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1141.443600][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1141.479277][T15720] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000c74dbd65 08:44:14 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000081001c00000019080001000000"], 0x24}}, 0x0) 08:44:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x300, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1141.627676][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1141.661350][T15720] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000c74dbd65 08:44:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4a4fad04, 0x13}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="3d56cfb38112"}]}, 0x34}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0xdac66cb0e16e3378, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6bfb279ac4a91fc41c8d9dcb8158a189b7c0464ae45a48f8"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b867cd36201d05e522391e540df8b6c726d872ba67273ea7"}]]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x400c855) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c0, r9, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1f}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3dd2}, {0x6, 0x16, 0xfff8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x400}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x48000}, 0x80000) 08:44:14 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000a9f001c00000019080001000000"], 0x24}}, 0x0) 08:44:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) write$binfmt_misc(r4, &(0x7f0000000200)={'syz1', "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"}, 0x1004) sendto$inet6(r3, &(0x7f00000000c0)="22f83b2533eb5715873d0824436551a1f5c0e8f6040fbddadeaa5bac764a51e6c8f6e21ecb8b2c9acbab2c69e18b97a4bd87a192d118a3621f57d1a81603856d9c5aaa4509498253467d43957ad2c5802f7eea36111c964f83d4cf71bff01709166bdcc0c7bb763e7d2979a9", 0x6c, 0x8000, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) splice(r2, &(0x7f0000000040)=0x80000001, r3, &(0x7f0000000080)=0x40, 0x1, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) [ 1141.854156][T15746] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007813) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1141.946408][T15750] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x500, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:15 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000f0001c00000019080001000000"], 0x24}}, 0x0) 08:44:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00040000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) [ 1142.278124][T15767] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1142.335843][ T37] audit: type=1804 audit(1629276255.428:1469): pid=15769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1893/cgroup.controllers" dev="sda1" ino=14935 res=1 errno=0 [ 1142.338540][T15772] __nla_validate_parse: 25 callbacks suppressed [ 1142.338555][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1142.453609][T15770] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1142.469764][T15770] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ebc0a6d2 08:44:15 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000008100000019080001000000"], 0x24}}, 0x0) 08:44:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = accept4(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000000)=0x80, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/hid_logitech_hidpp', 0x800, 0x20) recvfrom(r0, &(0x7f0000000080)=""/27, 0x1b, 0x40, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @remote}, 0x2, 0x1}}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 1142.488985][T15776] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1142.523922][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1142.540800][T15770] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x579, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1142.582846][T15770] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000ebc0a6d2 [ 1142.761266][ T37] audit: type=1804 audit(1629276255.848:1470): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1893/cgroup.controllers" dev="sda1" ino=14935 res=1 errno=0 08:44:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000293000/0x1000)=nil, 0x1000, 0x1000009, 0x810, 0xffffffffffffffff, 0x821ed000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0300ff07", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x600, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1142.909203][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007814) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1142.986753][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1143.098749][T15797] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1143.124240][T15797] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000064be31c1 08:44:16 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000002001c00000019080001000000"], 0x24}}, 0x0) [ 1143.197834][T15797] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1143.250912][T15797] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000064be31c1 08:44:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x700, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1143.282383][ T37] audit: type=1804 audit(1629276256.368:1471): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1894/cgroup.controllers" dev="sda1" ino=14945 res=1 errno=0 [ 1143.368363][T15797] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1143.396166][T15797] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000064be31c1 08:44:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x15f8, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x7f}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x7c, 0x80, [@measure_req={0x26, 0x6e, {0x80, 0x80, 0x9, "7bf349b04c3e2eb076643bfc3607c250d5eccce32935b3091572835da16f7d802ec14f48affcad1c84c9ddb0531e4ee377cff10addd58ce75a58a845a95af4478a1f6c4c6e3385dc1de5c85b28c495db05fd068bca3bcd01c91b973806a02f0e5a531efbbcd6e6c488165f"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_FTM_RESPONDER={0x1184, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x22, 0x2, "95f8bc2e25c533d7d9810cce30a86731c1f73584875b57026eb536df75e4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xff, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4b, 0x3, "973803e94272716ecda0ecd348c92b551680e12516011f6957302cf7402aebb894af8b60db2c927d0d434fac39dfc60d7e4c0d53769be7122327538a90640e8b40650e56a49557"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x110, 0x80, [@fast_bss_trans={0x37, 0x7e, {0x3f, 0x2, "57c34ddfdf60a4e273b267dc32585323", "ac7aa864a32889e77d51d1d44231768d5e4896d1835d958761e790e19c52b557", "0232f6e2c58c372c618658d069debc541e43f9468351b52fe34420fcf7bb8a8f", [{0x4, 0x25, "c8d8a1a2d02fd00dee373a4c44aa3f79d1da023a2beb3ba6c17f43a0f05a092543d2ce401f"}, {0x2, 0x3, 'JJa'}]}}, @perr={0x84, 0x7c, {0x40, 0x8, [@not_ext={{}, @device_a, 0x7, "", 0x32}, @not_ext={{}, @device_a, 0x6, "", 0x42}, @ext={{}, @broadcast, 0x4, @device_a, 0x2d}, @ext={{}, @device_b, 0x4, @broadcast, 0x34}, @not_ext={{}, @broadcast, 0x3cc0000, "", 0x32}, @not_ext={{}, @broadcast, 0x1f, "", 0x19}, @not_ext={{}, @broadcast, 0x1, "", 0x4}, @ext={{}, @device_b, 0x1, @broadcast, 0x1f}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x1ff}}, @mesh_chsw={0x76, 0x6, {0x94, 0xef, 0x25, 0xfffc}}]}, @NL80211_ATTR_BEACON_HEAD={0x2c0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2af}, @broadcast, @broadcast, @random="6a840b09f534", {0xc, 0x1}}, 0x8001, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1000}, @val={0x5, 0xd2, {0x2, 0x5c, 0x8, "af0b646b1ca3b4559736dfb6de0e42727f72a4d12798cab94c14c6396975e517e036939575be2fc24d8a94d34b444a8efd0d6922eca1c0f525729a2352b173a26643168c1d813b6eb0fbbffc2f17acc6a6cb160e72ba430a40445e96be70870f4387866093d8519343b2b9185b71259dca0116e7514143626007f1017922ca98d203fd7efbc0d6c8357d143152ab6adbd2a6b7eac1fec93584f3ea70938c9d2289464a05efb5435af75ff9ac8ab0caa918c92c50bde3f13e1a1d5125755222e36fa60fa460ac1679533db8000c6cf0"}}, @val={0x25, 0x3, {0x1, 0x3c, 0x8}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x3, 0x0, {0x1000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x5, 0x8}}, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfa}}, @val={0x76, 0x6, {0x32, 0x81, 0x15, 0x7fff}}, [{0xdd, 0xe2, "073b20eb9552a3679e7e3e9cf314a6d1faa05f362af506ceaef901c6b5ad45e90d4ace38ac2ce63d866268d04cb979e763d6ff7867a45146ffc26737c64227439edb4bee88d570371f1ddf0b9f011743bca8df974c61774f5bd4e9b6df7cee945bd033d9c348cf016c16e578780199871bf2685b0870b8d4feeecb870f48222568a57c68688916d33a8112a4beb58502d87f8f95acd51611c9f308de463ff456b862128ea33c8aded1dbcbcad5c84a2383bd9e2f1e8d29ac864c4293d967b116e130163d2f2da8286dfb3f2f448c395fb15bfa2311a227910f1e751dd41506f78e5f"}, {0xdd, 0x9d, "4de3c2304a8132ac39eb1bb4193c174cb6bcd2943cbd75401cd3c3cd3af828b72cfdaefdadc1f66057b7b7a115a543d83613988d101961eea58748373eb6eb53ab30747faab9fdf6cd5a0b90d861dcab676ff17ecbc0fe8fbc40882bea5d5f0b3ff6e589b17c7f933768c50d9ff13340c919d298260ee184c1ccb016bfa55d920c383f85d9e81a088ae6c96601881d9bc21204855f01550b049ebc1162"}]}}]}, 0x15f8}, 0x1, 0x0, 0x0, 0x4}, 0x4000081) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001c40)={0x1c68, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x53, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x48}}, @supported_rates={0x1, 0x6, [{0x18, 0x1}, {0x9}, {0x0, 0x1}, {0x6c, 0x1}, {0x18}, {0x1}]}, @cf={0x4, 0x6, {0x24, 0x80, 0x82af, 0x3}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x0, 0x0, {0x800, 0x4, 0x0, 0x3a5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0xa6, 0x21}}, @chsw_timing={0x68, 0x4, {0x5f1}}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE_PROBE_RESP={0x35, 0x7f, [@peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x4, @void, @void}}, @peer_mgmt={0x75, 0x18, {0x0, 0x7fff, @val=0x8000, @val=0xa, @val="acb70d946e362c92629a32c9f71849cf"}}, @measure_req={0x26, 0xa, {0xff, 0x3, 0x7, "8bd0f8005b91d5"}}, @challenge={0x10, 0x1, 0x74}]}, @NL80211_ATTR_BEACON_HEAD={0x438, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x1, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @random="6b935e634e8f"}, @void, @val={0x3, 0x1, 0xb3}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7f, 0xed4b446a7b277127, 0xf4}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x8, 0x8, 0x3}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x34, 0x49}}, @val={0x76, 0x6, {0x1, 0x0, 0x2b, 0x5}}, [{0xdd, 0x42, "b29ffc5899497b5d701137bec26deda3b8e41e35f6960fbb45ba02db56df2f39f0e785d71cd3437bca12e7b4219f037e0204a3e56e9f5e5692945e904b69e70b83ac"}, {0xdd, 0x88, "fa45505cdd408da3ecd18c74348677c86c272d34b4a047d0f0ce1e5124202a304d5d295f03dcb23a33f80d3e30586aafc2f6f5578489a505131b9dea9ac349b95a2673279422fdf0fd35b34a432deef444d7cc1854766e927abd36e1860d88491f4f9d350755a455a762d51cd4c3c999cfa6e37c9bb022fac9bd591185980b9f680f487f8901a3b6"}, {0xdd, 0x89, "c0b77ae11b99fc3cb16e0edba1534d3a9888c4d255d6e1701a3780128db805b4953e26b9ddcd6df4c5efb512a59da2764276331aee3c14cdf0556cebbea86f94577ba2ef05515710cba73dca215d9fb69ad12deeb34952d81c842181d7f27c74db333731dea8a43c7b25a3bde6af0ef179804b9c5992c74968ed0e5e54af87db0d1f5b4d80453383b2"}, {0xdd, 0x62, "227556c7a110e14b1179d341d5bfe506f85d05ea32f0121ae58560b969af4e0704e57117f9a9c4b6cefe5185ed6ffc87df0dae241a82ce4a549bea63a466241cb1cdf88d993bda964650518f0650ee27d2f789402c85732315f25a7806fc1de65ba0"}, {0xdd, 0xe, "ac182db3e8091f6114cd14058f4b"}, {0xdd, 0x51, "440e40d1175f2929e2271efd39aa4022abed0a23a0d264869225884240dac4f1bd7e71c4710762d3cb174527eccabc76b7c569f0b67714af9a36d0897d656d2fe7f7e83254497d7738492cfade1c7e7a82"}, {0xdd, 0xc9, "3c56108c43b890cf8f9e3aaa32a0b7a42cd26a2d60c24ee12fcf3952e0479003d13b58b053c0498758275c545a79073b56dba391164c69fbe93a7a0978f596fba2a494eac3af4f0f180fabc046d7e1203518fcd89a3ce52796f5d1b8c72fee29002acb51646fa60764741b9c8e32562d54e31a4cff47f0c71832d097aa1e4499ec4740e4f3c80983596dc21fb2a2036e7d8643a797bf18a015db654cb0a470731bb97be2ae581a54aeedde6216c8efa9dd60a3ebb9d228202c35a53d45fd6966453ef34c26d22453b0"}, {0xdd, 0x59, "109f31e2f0b826daf524a046782261d279069dc062a60eb77720bea7fd099f7f3f51950fd33312c5d195008de38fea063a8760f77ad4d37e1aee604dc29fd4f85c9d9d8d0ceec41f68e40cde0a2826ff7d877798154609ea3f"}, {0xdd, 0x67, "95c50d600bbd14fef7962b0dc3f95decfd9b9d906f48b51c084731107cd4f4d89041b51cf97e46ee0c6e4cd2b4e50cefc5b2e0d9aefa2134f9519d1e59712e619c712809eaa6d792657c506f0e4b1eb4f8def56738e8c51d76bdd129aa53f777a226522ce42a63"}, {0xdd, 0x1a, "4c2cc7163e604bfb7da36ac31bd6af534529ad8f1c1d8b48cb77"}]}}, @NL80211_ATTR_PROBE_RESP={0x1d4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x34c, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @random='\"g9)Ih', {0x8, 0x2}}, 0x6, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xc5}, @val={0x4, 0x6, {0x80, 0x6, 0x5, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x55, "82b146ddcbe2d073949b92d83c9938b1246ac6d1ab895b6359fc27e86de6ddae73290f99bba7fe9a4d32980fbe4617ef9723e412e71632dacd65b52d811a27747d6e505ab4b74768abee8090bac3f66a8580675fa6"}, {0xdd, 0x2d, "ab134353ee92344aed7f96fd76cae66080549ce4dd8edd997cc8e6d99d2aade54e4302c4193a5f045b457332ee"}, {0xdd, 0xad, "10831f69953addff6dfa14a1c3b3229384758b3ee2efde9e5ab396ecaf4f70f91082aa8494eb666249d05ce98740218caa2ca5f12629e945b766e426b5e3d3ef983beacf2009b445cebd32b685a227dfe8d673c08d204e26643fb2fc6303adf712add576439db0ccc1201ad7cd21eb2f45dfe7a44c507b640aaeadcd32286ee8b6c3c06545195b17abf1c3610215faa05cf7fb8be151789a43f19e4c6cb558f444cc57207310504f197aef7ca2"}, {0xdd, 0xfc, "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"}, {0xdd, 0xc6, "eea3649ffe147b572485a059653cf25191ce60a08e44e510915e0b345693de19958a21cb1f3b798907a53bf8d64a2bfc6ce4ae86226b4aa884315ed40d907154e4fc9f5e0dc64e827630799d85eef297638375744a826be6c7946aa85fab9b2526a4903cf1305d4b89496b717fac79de2a8c9be55f49cb3b306274b6f0a55cec630f2e915aafe5f7e476091640ba44190b270a8c84f726e36709e3146c3a2b7edd227bcb40c8746abbff804fce33ec6fbf47ab9014f3bf995d52f205dd123c4251692792a542"}, {0xdd, 0x19, "2b05b95934e1c6986d977f49ade6f6b7ece74628399be7969c"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1010, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0xd7, 0xf, [@mic={0x8c, 0x18, {0xcb3, "90588f9433ca", @long="1ed5608dc2a41e415e8be731563435a8"}}, @random_vendor={0xdd, 0xb7, "f3faafe8e5cbeade8ed1d921e65142a4bf7941fbdaa1683a7ec3dca056ded705bd7524cab8fa5c1c30babd93761d8415bb2c1d4760060ec691446e6142ae751eae68ef4699c9cdd2ba7d0724d9d56f39b06b097b72be09dd97d05989e4619416d2c663f5779371eeaaaa54d8b795b0778aaa0627f1621d88627e982336da703e2fd945b28716f687a3085159966d3133540f57aa397f2b7d14674176a24fa9af6ccf0a4322ca9d656b86a791fa34adfaaace5bb8624c5c"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x180, 0x80, [@measure_req={0x26, 0x1c, {0x0, 0x0, 0x8, "e3f9682c66986edb5b2552cc6448187db960c04c0ceb824363"}}, @mic={0x8c, 0x10, {0x9b0, "5fef4eb02819", @short="2b5a5ed7ec4f3181"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x7f, 0x80, @device_b, 0x0, "", 0x4, 0x7, @broadcast, 0x2}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x91, {0x6, 0x5, 0x91, "f26adf99788ee01496fe9d27649c696fa9dc27c67da5d1d392fdb0e410ec4a42ba4dd1f582efdf5343857565e843165c70e757e2f87a0eb4af371d7b405a34326459298ef09def4f79d955dabc7ae808d9a4d85746432d6d3c736641776bf684ae80641269420cd5c5cb858e982f8971baafc695d0dcd4a4f6a8d2380d59c732df751cdea54e666d74ba487fc3ac"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xa5, 0x5, 0x5}}, @preq={0x82, 0x78, @ext={{0x0, 0x1}, 0x1, 0x5, 0x3, @broadcast, 0x7f, @device_a, 0x4, 0x2, 0x8, [{{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0xffff87f5}, {{0x1}, @device_b, 0x5}, {}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{}, @broadcast, 0x6b1d}, {{}, @device_a, 0x28}]}}, @dsss={0x3, 0x1, 0x9d}, @ibss={0x6, 0x2, 0xff7f}]}]}, 0x1c68}, 0x1, 0x0, 0x0, 0x48000}, 0x24044000) [ 1143.427415][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1143.476345][T15799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1143.497725][T15799] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000064be31c1 [ 1143.532212][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:16 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000003001c00000019080001000000"], 0x24}}, 0x0) [ 1143.573950][T15797] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1143.582327][T15797] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000064be31c1 08:44:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x900, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1143.689258][ T37] audit: type=1804 audit(1629276256.778:1472): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1894/cgroup.controllers" dev="sda1" ino=14945 res=1 errno=0 08:44:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007815) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1143.847539][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1143.919670][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xa00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:17 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000004001c00000019080001000000"], 0x24}}, 0x0) 08:44:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x82401, 0x0) io_submit(0x0, 0xa, &(0x7f0000000bc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000d80)="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", 0x10c, 0x380}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="93c0406f8253017a12f0ac1e6229901f7d878e6efb8e49d9f6b8ce4c9d6fdfb7778e92a9517d2983b9e3a3015c910f2759e9e83d25089676f85198111229aefed6452263aa503cd2bbf26cd9a4b059f0ec204316111cb5712663870506b9ec455ece84480f2f8ccf175174a6586baf3db44a28eca577b2a9b11758a118b14d522bca2a3e45c0fa2ee15eea28bcfc25e2f3ae8ac407d169cc02d5743852856a9bda24e36f5273db5738e5987635d951721e249aec9491c83077740afadbe510ecb77fbae4a515f60b1534fb65d4e247f66c4cc11ee86089197db55072912e6cf71cd42297fb", 0xe5, 0x10000, 0x0, 0x3, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="c64d88118500b9a955ec511bd6b9704ea0c6ba8d3cf0e3a0cfed1e4bca2cda164615f906cc4e01d602495556f6cb8426645e93851cea37fb75148ab78ea1487cc89de2f9215593013683208eb53d307dd256323e41f0dab44a8e1a2fc4b94f6dd6688a8ccd600fde98f38e439d03919e40140d3ca702428c4af13f8bd1addfaf8cb519a1d6f88bf4e5bb5583be336cbaa3318caeba0b4afa72efd8c6cf07", 0x9e, 0x7fff, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000400)="f5f3236ce6502422e8ae520cb5", 0xd, 0x8000, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1005, 0xffffffffffffffff, &(0x7f00000004c0)="a966601971124e6f7713e18ccc48b14b99fc9c09cea733d8885cd1cde46f168aa59981df72c1c42ce42dda9bf00fe00bdab40fed120050e9b3998ec04cd5b6372762b61b9827291cdfd46b33fb34a8859e1ca30c18f52fb7ba2a665060177161a236fd8a4c104195e7713e3ba2fe8ce2e286020915c089c91abc7b99ae9a25b57eeeb267f18d9ab154d30e36433c456aa4", 0x91, 0x4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, &(0x7f0000000600)="da89e9fb79949c7e5855b2874b0e053be30e48faa228083e8397d457cd19bb1a78cf8cd7f6aeaf6bba8ec5ec3a4d454cffd86b9dabd27e670d0d66bf7d1838fc754c2b7830e1a4ac103fdc834425c7632a2d32bbd2209d9a06efe0d9e74d9f51a54052b97b764f3766085c0b74fb87602e6176e102e8414f35c6a37bbba577cb28356faadfd9f07c0d7675ea458ca90c6492489fc5dc196928a78e251f08f99b7b430ce980bbaad300fdbd7d200e9437a3500546e003b1c18bd693b9a35cdef6cd9de3380a85b22713232a3b18c09c50317755fa2a0de2d49adac9fab1f7", 0xde, 0x9, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000740)="a84bf99e07e0ac3161d42f5000130ea1854b40b0d79295244590c988a4d78eaa2421e0bf119795a1cc2a1b9b565aa1d4a335ab730ee5f91ed5bf335d15b694fe1def668793ec11ad1820b4dd1e9fdc374d99914309c565774effa294812276cbcf5853eb605fbf4a940ae058b7f597ad0e50fb737086297b8e6f5dd32b0910b4af648c77a8baffdeba47beabb36020fa81904ef70ac68ef41d6ac48e", 0x9c, 0x7, 0x0, 0x1, r5}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xcb4, r2, &(0x7f0000000840)="1c5a4b03f2ec3b941211495a817ed0f7972e9d87dd6ea05dde291f87b8533da00b0b1b48d57a0a1cbe1ed5b014d9ae667f4961fa3b036f3aedab2784dbe3bc74eb6974644567ce6a05ed46cf6b0230e44107a5d6e49d3d8dc1d50fd0224a2fdcc3abc905bca7938837fd74cba9b93e16a64d471770bb6d8182bce723e6caac1eb52e5b3a90c9592c872034e2ab6fb57a7520029d7bf13664", 0x98, 0x200, 0x0, 0x1, r6}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0xfffe, r7, &(0x7f0000000040)="533c424798343367247812c52bbbe3e432b2a1db48bf507548db1d02ce59fbf9ab692c75f79a0965249a3f70763450d337104bef691d2263644fb5b529e2afb4ead2271300"/84, 0x54, 0x8000, 0x0, 0x1, r8}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000a80)="dd8042f59f38341bbc5be96f0d0bc577ea326d5814394737221b7f3f1e84b7c07d3187c0095c596ffb7d73eb0f40ac409672428f5568f0fc8d75ee5c29409b8cbdd4aa51a73f6240c4dce8354025c6f1db55c2ba756a9dbf0003bc565262a710155e6af439907865c420e4a1b4f9567b6e65ab5a01470e2f2f0a82cae53b786cf781bf098f7e51f6f5af8cec5e428e5aa794d484bacd064c95e060f702739a593187df0dd4c4ad6375976bacc959e8bbdfb2eb1139cbc7f698313f4b46b5318798240b7729222c89dc358fc4b79f", 0xce, 0x3c, 0x0, 0x2, r1}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r10}, 0x8) [ 1144.133257][ T37] audit: type=1804 audit(1629276257.218:1473): pid=15833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1895/cgroup.controllers" dev="sda1" ino=14955 res=1 errno=0 08:44:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x18000, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000080", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x1}, &(0x7f0000000080)=0x8) [ 1144.237946][T15835] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1144.248497][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1144.267342][T15835] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008877ff2b [ 1144.314543][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1144.343735][T15835] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:17 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000005001c00000019080001000000"], 0x24}}, 0x0) 08:44:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xb00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1144.393899][T15835] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008877ff2b 08:44:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x82401, 0x0) io_submit(0x0, 0xa, &(0x7f0000000bc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000d80)="993ca6c2829fbd615e8f0872fb3790c82eed391c36dc705bcdb029b3751b850f8baf14b4d0e976fd2ae32ae1977d82d1fa892de9bc08cbe19c19abba8b7615dd778dec7269615750bb48f44974ea9a041e8fd59827128833193523e5661f5f0f1f03a698b4d22dfeb06f2b4b553968ddb9551bfa553205c3df14cd8bb7bf776696eac5de1f059fa795448f798e2a0632a5329c68f3957ce1a927f06c26199f649f5f0646701ce1a9248acfca15ff66466b0718cc03768b083797667424402f9097e2f2844d7aebd9dabc15d707f2a7a3e6d892c45a6c66119ef3a205cb21acb1600004842f471c988892c237c38a46c1d10673f6335631a44c55e14b8c9973fd735295d90f066fa0bafacc3e", 0x10c, 0x380}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="93c0406f8253017a12f0ac1e6229901f7d878e6efb8e49d9f6b8ce4c9d6fdfb7778e92a9517d2983b9e3a3015c910f2759e9e83d25089676f85198111229aefed6452263aa503cd2bbf26cd9a4b059f0ec204316111cb5712663870506b9ec455ece84480f2f8ccf175174a6586baf3db44a28eca577b2a9b11758a118b14d522bca2a3e45c0fa2ee15eea28bcfc25e2f3ae8ac407d169cc02d5743852856a9bda24e36f5273db5738e5987635d951721e249aec9491c83077740afadbe510ecb77fbae4a515f60b1534fb65d4e247f66c4cc11ee86089197db55072912e6cf71cd42297fb", 0xe5, 0x10000, 0x0, 0x3, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="c64d88118500b9a955ec511bd6b9704ea0c6ba8d3cf0e3a0cfed1e4bca2cda164615f906cc4e01d602495556f6cb8426645e93851cea37fb75148ab78ea1487cc89de2f9215593013683208eb53d307dd256323e41f0dab44a8e1a2fc4b94f6dd6688a8ccd600fde98f38e439d03919e40140d3ca702428c4af13f8bd1addfaf8cb519a1d6f88bf4e5bb5583be336cbaa3318caeba0b4afa72efd8c6cf07", 0x9e, 0x7fff, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000400)="f5f3236ce6502422e8ae520cb5", 0xd, 0x8000, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1005, 0xffffffffffffffff, &(0x7f00000004c0)="a966601971124e6f7713e18ccc48b14b99fc9c09cea733d8885cd1cde46f168aa59981df72c1c42ce42dda9bf00fe00bdab40fed120050e9b3998ec04cd5b6372762b61b9827291cdfd46b33fb34a8859e1ca30c18f52fb7ba2a665060177161a236fd8a4c104195e7713e3ba2fe8ce2e286020915c089c91abc7b99ae9a25b57eeeb267f18d9ab154d30e36433c456aa4", 0x91, 0x4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, &(0x7f0000000600)="da89e9fb79949c7e5855b2874b0e053be30e48faa228083e8397d457cd19bb1a78cf8cd7f6aeaf6bba8ec5ec3a4d454cffd86b9dabd27e670d0d66bf7d1838fc754c2b7830e1a4ac103fdc834425c7632a2d32bbd2209d9a06efe0d9e74d9f51a54052b97b764f3766085c0b74fb87602e6176e102e8414f35c6a37bbba577cb28356faadfd9f07c0d7675ea458ca90c6492489fc5dc196928a78e251f08f99b7b430ce980bbaad300fdbd7d200e9437a3500546e003b1c18bd693b9a35cdef6cd9de3380a85b22713232a3b18c09c50317755fa2a0de2d49adac9fab1f7", 0xde, 0x9, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000740)="a84bf99e07e0ac3161d42f5000130ea1854b40b0d79295244590c988a4d78eaa2421e0bf119795a1cc2a1b9b565aa1d4a335ab730ee5f91ed5bf335d15b694fe1def668793ec11ad1820b4dd1e9fdc374d99914309c565774effa294812276cbcf5853eb605fbf4a940ae058b7f597ad0e50fb737086297b8e6f5dd32b0910b4af648c77a8baffdeba47beabb36020fa81904ef70ac68ef41d6ac48e", 0x9c, 0x7, 0x0, 0x1, r5}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xcb4, r2, &(0x7f0000000840)="1c5a4b03f2ec3b941211495a817ed0f7972e9d87dd6ea05dde291f87b8533da00b0b1b48d57a0a1cbe1ed5b014d9ae667f4961fa3b036f3aedab2784dbe3bc74eb6974644567ce6a05ed46cf6b0230e44107a5d6e49d3d8dc1d50fd0224a2fdcc3abc905bca7938837fd74cba9b93e16a64d471770bb6d8182bce723e6caac1eb52e5b3a90c9592c872034e2ab6fb57a7520029d7bf13664", 0x98, 0x200, 0x0, 0x1, r6}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0xfffe, r7, &(0x7f0000000040)="533c424798343367247812c52bbbe3e432b2a1db48bf507548db1d02ce59fbf9ab692c75f79a0965249a3f70763450d337104bef691d2263644fb5b529e2afb4ead2271300"/84, 0x54, 0x8000, 0x0, 0x1, r8}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000a80)="dd8042f59f38341bbc5be96f0d0bc577ea326d5814394737221b7f3f1e84b7c07d3187c0095c596ffb7d73eb0f40ac409672428f5568f0fc8d75ee5c29409b8cbdd4aa51a73f6240c4dce8354025c6f1db55c2ba756a9dbf0003bc565262a710155e6af439907865c420e4a1b4f9567b6e65ab5a01470e2f2f0a82cae53b786cf781bf098f7e51f6f5af8cec5e428e5aa794d484bacd064c95e060f702739a593187df0dd4c4ad6375976bacc959e8bbdfb2eb1139cbc7f698313f4b46b5318798240b7729222c89dc358fc4b79f", 0xce, 0x3c, 0x0, 0x2, r1}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r10}, 0x8) 08:44:17 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000006001c00000019080001000000"], 0x24}}, 0x0) 08:44:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007816) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xc00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac020000240010002bbd70000000000000002000", @ANYRES32=0x0, @ANYBLOB="10000a000a00f1ff0b00f2ff08000d000300000006000500800000000600050006650000a00008801c00010000057f00030000000000000078ffffff020000000100000006000200060000001c00010038ff090081000000000000000600000005000000030000000a00020009000600ec0000001c0001007f0900048000000002000000060000004e91702e050000000e0002000008ff7fb0c93f0095db00001c000100440708000100000000000000030000001e9800000100000006000200de000000d00108801c0001000500008001feffff020000000300000040000000030000000a000200080002004f0a00001c00010000442000080000000100000007000000010000000900000016000200070009000300018008000600040004007f0000001c0001000612ff0f010000000200000000020000c1160000070000001200020008000300fa010008ff7facab040000001c00010006059900da07d54202000000030000000100010007000000120002001f0007003589010001000800020000001c000100201e0800ff7f000001000000040000007f000000030000000a00020008000800d20000001c00010003202000010000000000000008000000090000000600000010000200ff01090001000000010006001c00010004fa001001000080010000003f000000ff00000007000000120002000700000007006f00f50c0400000000001c000100f7067f0000000000020000000402000000010000090000001600020000100104000804000900090000107700080000001c00010059000600e5c30000030000003f00000001000000050000000e000200399a090000049400050000001c0001007f001c0304000000000000008900000040000000050000000e0002008100330008008000ff000000"], 0x2ac}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000884) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000015", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x8, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7678900800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0xb}, {0x1, 0xfff2}, {0x6, 0x1a}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) [ 1144.961557][T15854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:18 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000007001c00000019080001000000"], 0x24}}, 0x0) [ 1145.007553][T15854] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000133a34d4 08:44:18 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xe00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1145.100104][ T37] audit: type=1804 audit(1629276258.188:1474): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1896/cgroup.controllers" dev="sda1" ino=14974 res=1 errno=0 [ 1145.140012][T15854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1145.177959][T15854] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000133a34d4 08:44:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x82401, 0x0) io_submit(0x0, 0xa, &(0x7f0000000bc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000d80)="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", 0x10c, 0x380}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="93c0406f8253017a12f0ac1e6229901f7d878e6efb8e49d9f6b8ce4c9d6fdfb7778e92a9517d2983b9e3a3015c910f2759e9e83d25089676f85198111229aefed6452263aa503cd2bbf26cd9a4b059f0ec204316111cb5712663870506b9ec455ece84480f2f8ccf175174a6586baf3db44a28eca577b2a9b11758a118b14d522bca2a3e45c0fa2ee15eea28bcfc25e2f3ae8ac407d169cc02d5743852856a9bda24e36f5273db5738e5987635d951721e249aec9491c83077740afadbe510ecb77fbae4a515f60b1534fb65d4e247f66c4cc11ee86089197db55072912e6cf71cd42297fb", 0xe5, 0x10000, 0x0, 0x3, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="c64d88118500b9a955ec511bd6b9704ea0c6ba8d3cf0e3a0cfed1e4bca2cda164615f906cc4e01d602495556f6cb8426645e93851cea37fb75148ab78ea1487cc89de2f9215593013683208eb53d307dd256323e41f0dab44a8e1a2fc4b94f6dd6688a8ccd600fde98f38e439d03919e40140d3ca702428c4af13f8bd1addfaf8cb519a1d6f88bf4e5bb5583be336cbaa3318caeba0b4afa72efd8c6cf07", 0x9e, 0x7fff, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000400)="f5f3236ce6502422e8ae520cb5", 0xd, 0x8000, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1005, 0xffffffffffffffff, &(0x7f00000004c0)="a966601971124e6f7713e18ccc48b14b99fc9c09cea733d8885cd1cde46f168aa59981df72c1c42ce42dda9bf00fe00bdab40fed120050e9b3998ec04cd5b6372762b61b9827291cdfd46b33fb34a8859e1ca30c18f52fb7ba2a665060177161a236fd8a4c104195e7713e3ba2fe8ce2e286020915c089c91abc7b99ae9a25b57eeeb267f18d9ab154d30e36433c456aa4", 0x91, 0x4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, &(0x7f0000000600)="da89e9fb79949c7e5855b2874b0e053be30e48faa228083e8397d457cd19bb1a78cf8cd7f6aeaf6bba8ec5ec3a4d454cffd86b9dabd27e670d0d66bf7d1838fc754c2b7830e1a4ac103fdc834425c7632a2d32bbd2209d9a06efe0d9e74d9f51a54052b97b764f3766085c0b74fb87602e6176e102e8414f35c6a37bbba577cb28356faadfd9f07c0d7675ea458ca90c6492489fc5dc196928a78e251f08f99b7b430ce980bbaad300fdbd7d200e9437a3500546e003b1c18bd693b9a35cdef6cd9de3380a85b22713232a3b18c09c50317755fa2a0de2d49adac9fab1f7", 0xde, 0x9, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000740)="a84bf99e07e0ac3161d42f5000130ea1854b40b0d79295244590c988a4d78eaa2421e0bf119795a1cc2a1b9b565aa1d4a335ab730ee5f91ed5bf335d15b694fe1def668793ec11ad1820b4dd1e9fdc374d99914309c565774effa294812276cbcf5853eb605fbf4a940ae058b7f597ad0e50fb737086297b8e6f5dd32b0910b4af648c77a8baffdeba47beabb36020fa81904ef70ac68ef41d6ac48e", 0x9c, 0x7, 0x0, 0x1, r5}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0xcb4, r2, &(0x7f0000000840)="1c5a4b03f2ec3b941211495a817ed0f7972e9d87dd6ea05dde291f87b8533da00b0b1b48d57a0a1cbe1ed5b014d9ae667f4961fa3b036f3aedab2784dbe3bc74eb6974644567ce6a05ed46cf6b0230e44107a5d6e49d3d8dc1d50fd0224a2fdcc3abc905bca7938837fd74cba9b93e16a64d471770bb6d8182bce723e6caac1eb52e5b3a90c9592c872034e2ab6fb57a7520029d7bf13664", 0x98, 0x200, 0x0, 0x1, r6}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0xfffe, r7, &(0x7f0000000040)="533c424798343367247812c52bbbe3e432b2a1db48bf507548db1d02ce59fbf9ab692c75f79a0965249a3f70763450d337104bef691d2263644fb5b529e2afb4ead2271300"/84, 0x54, 0x8000, 0x0, 0x1, r8}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000a80)="dd8042f59f38341bbc5be96f0d0bc577ea326d5814394737221b7f3f1e84b7c07d3187c0095c596ffb7d73eb0f40ac409672428f5568f0fc8d75ee5c29409b8cbdd4aa51a73f6240c4dce8354025c6f1db55c2ba756a9dbf0003bc565262a710155e6af439907865c420e4a1b4f9567b6e65ab5a01470e2f2f0a82cae53b786cf781bf098f7e51f6f5af8cec5e428e5aa794d484bacd064c95e060f702739a593187df0dd4c4ad6375976bacc959e8bbdfb2eb1139cbc7f698313f4b46b5318798240b7729222c89dc358fc4b79f", 0xce, 0x3c, 0x0, 0x2, r1}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r10}, 0x8) [ 1145.301928][T15858] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1145.359631][T15858] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f1bd4532 [ 1145.396806][T15874] net_ratelimit: 14 callbacks suppressed 08:44:18 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000008001c00000019080001000000"], 0x24}}, 0x0) [ 1145.396826][T15874] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1145.463997][ T37] audit: type=1804 audit(1629276258.558:1475): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1896/cgroup.controllers" dev="sda1" ino=14974 res=1 errno=0 [ 1145.506513][T15867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1145.506513][T15862] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1145.506541][T15867] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f1bd4532 [ 1145.524539][T15862] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f1bd4532 [ 1145.571620][T15878] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007817) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:18 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000009001c00000019080001000000"], 0x24}}, 0x0) 08:44:18 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xf00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1145.658658][T15858] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1145.679606][T15858] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f1bd4532 08:44:19 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000a001c00000019080001000000"], 0x24}}, 0x0) [ 1145.844087][T15877] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1145.874367][T15877] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f1bd4532 [ 1145.959137][T15891] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/228, 0xe4}], 0x3, 0x0, 0x100) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000140)={0xa9e, 0x8, '\x00', 0x0, &(0x7f0000000040)=[0x0]}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000008001afb35c3e2d871a7f134fceddaa8d10d870ff9beb653cc319a8cd5433d56c9f5d645d0855672fd6d0c573e12e5eaeed5f30066cf1e08af916abb83bcef4d0c52b30dcfd6f31c2880520a5915eb3e8ff69e492cbe08942f57e1aa6e07047ec77b4a4412f33a5a60f0f39f93"], 0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r6, 0xc000000, 0x6}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r7, @in={{0x2, 0x4e22, @broadcast}}, 0x8, 0x8}, &(0x7f0000000340)=0x90) [ 1146.015466][ T37] audit: type=1804 audit(1629276259.108:1476): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1897/cgroup.controllers" dev="sda1" ino=14944 res=1 errno=0 [ 1146.071784][T15893] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x1100, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:19 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1146.251326][ T37] audit: type=1804 audit(1629276259.338:1477): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1897/cgroup.controllers" dev="sda1" ino=14944 res=1 errno=0 08:44:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007818) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:19 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000c001c00000019080001000000"], 0x24}}, 0x0) [ 1146.333741][T15895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1146.355145][T15895] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000691c97d5 [ 1146.425265][T15895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1146.426795][T15902] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1146.449077][T15895] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000691c97d5 [ 1146.523697][T15895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1146.541061][T15895] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000691c97d5 [ 1146.565358][T15909] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1146.572525][T15908] FAULT_INJECTION: forcing a failure. [ 1146.572525][T15908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.618273][ T37] audit: type=1804 audit(1629276259.708:1478): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1898/cgroup.controllers" dev="sda1" ino=14972 res=1 errno=0 [ 1146.627193][T15899] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1146.721302][T15908] CPU: 0 PID: 15908 Comm: syz-executor.2 Not tainted 5.14.0-rc6-syzkaller #0 [ 1146.730114][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.740200][T15908] Call Trace: [ 1146.743493][T15908] dump_stack_lvl+0xcd/0x134 [ 1146.748104][T15908] should_fail.cold+0x5/0xa [ 1146.750292][T15899] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000691c97d5 [ 1146.752635][T15908] _copy_to_user+0x2c/0x150 [ 1146.752672][T15908] sctp_getsockopt+0x1f05/0x6ea0 [ 1146.752772][T15908] ? sctp_getsockopt_peeloff_common+0x320/0x320 [ 1146.752796][T15908] ? lock_chain_count+0x20/0x20 [ 1146.752821][T15908] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1146.752846][T15908] ? find_held_lock+0x2d/0x110 [ 1146.752873][T15908] ? __fget_files+0x21b/0x3e0 [ 1146.800016][T15908] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1146.806264][T15908] ? selinux_socket_getsockopt+0x203/0x2b0 [ 1146.812073][T15908] ? selinux_socket_sendmsg+0x2b0/0x2b0 [ 1146.817620][T15908] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1146.823858][T15908] ? sock_def_destruct+0x10/0x10 [ 1146.828792][T15908] __sys_getsockopt+0x21f/0x5f0 [ 1146.833641][T15908] ? lock_downgrade+0x6e0/0x6e0 [ 1146.838487][T15908] ? __ia32_sys_setsockopt+0x150/0x150 [ 1146.843949][T15908] __x64_sys_getsockopt+0xba/0x150 [ 1146.849060][T15908] ? syscall_enter_from_user_mode+0x21/0x70 [ 1146.854952][T15908] do_syscall_64+0x35/0xb0 [ 1146.859368][T15908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1146.865258][T15908] RIP: 0033:0x4665e9 [ 1146.869143][T15908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.888747][T15908] RSP: 002b:00007f70a180e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1146.897155][T15908] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1146.905121][T15908] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 1146.913098][T15908] RBP: 00007f70a180e1d0 R08: 00000000200000c0 R09: 0000000000000000 08:44:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x17b8, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1146.921081][T15908] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1146.929067][T15908] R13: 00007fffa33e015f R14: 00007f70a180e300 R15: 0000000000022000 08:44:20 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000e001c00000019080001000000"], 0x24}}, 0x0) [ 1147.016568][T15895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1147.039938][T15895] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000691c97d5 [ 1147.063130][T15915] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1147.108758][ T37] audit: type=1804 audit(1629276260.198:1479): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1898/cgroup.controllers" dev="sda1" ino=14972 res=1 errno=0 08:44:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$qnx6(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfff, 0x4, &(0x7f0000000400)=[{&(0x7f0000000200)="82eabd778f11df47b17b60ec8709f076bfd9ffbbae45fdbdb2aba0a616c468773b275f9085e5f9f7377302d3cd2b5f98e25098b8aa3a36c6865c8ccc1e2ed79d6da7a6c113cc9c4f7f9d8201acc8203a1588b3225b3ea69f11a246b4c21e373f0ed22197f60615d5b46b0c2b8f20b39658fdcd7e2abc375e54e1cec3284712d9c9986f8cad169509e8720adec35e88136c7de4c25a73c7ec8bc558276f09c30668a3eda0c8b2a7a5029df6c37578957b4778d57b97f5de36c76fda7875e5a2feccf09521509e8f96ef74ebbadb89daa01cd381", 0xd3, 0x7}, {&(0x7f00000000c0)="300442b03c2981310aa8a5650215fabf1a9e4a4415fb4398bce5069ea8eae77b8eca44867d0db0c9e97c055c85ae3bd5c11c8464fed9ce1abc6121a5f856c2ac0e34b3eaa8c1ebdb36a3b1dca2", 0x4d, 0xfffffffffffffff7}, {&(0x7f0000000300)="19c04d277b4b34f442221f6481cab732c87c721347f5add56ebfd6f7415dc0e9aad3c9778fa4e704d26d9f791a9b5df1b4c030d3ee2e26ab5593fe0723d3cc28a7cfe88badeac001409006d93041859adbef5d2d081abfeada0027f48af5e564c604b7715e8db1065085ac3c93dcc7ca4135c67d8cc9100ad2934aaf48c115d623e1ed0e3c3bb000d8891ca38dfed1bc245c612b906bead59c739eaaf7046063a18b9e601df6e907cf7808588dbbd1f9a866e3b1a7b3eae8527c2bddaa0da88b37fec56f2d856177014f64a55f81", 0xce, 0x9}, {&(0x7f0000000140)="5be093dceebcf2f6fa141cfb1d9b08619ffa420c72af27a91e92b7922eacc844b9cc6894d9712eef5ffa69d12477ea", 0x2f, 0xf4b}], 0x82, &(0x7f0000000480)={[{'\'@:-'}, {'($-\''}, {'\a]%'}, {')&'}, {}, {'/'}, {'(+*/#,-'}, {'@$@,!'}, {')\xee'}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x66, 0x34, 0x35, 0x35, 0x37, 0x37], 0x2d, [0x35, 0x39, 0x32, 0x63], 0x2d, [0x34, 0x31, 0x63, 0x35], 0x2d, [0x61, 0x34, 0x31, 0x63], 0x2d, [0x37, 0x38, 0x37, 0x63, 0x37, 0x34, 0x32, 0x968296ec3ad590ed]}}}, {@euid_lt}, {@euid_gt={'euid>', 0xee01}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x184) setxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007819) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1147.184948][T15919] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x1f00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:20 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000010001c00000019080001000000"], 0x24}}, 0x0) [ 1147.378630][T15924] loop1: detected capacity change from 0 to 16383 [ 1147.439660][T15924] qnx6: invalid mount options. [ 1147.448918][ T37] audit: type=1804 audit(1629276260.538:1480): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1899/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 [ 1147.533712][T15930] loop1: detected capacity change from 0 to 16383 [ 1147.556591][T15933] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1147.614540][T15934] __nla_validate_parse: 15 callbacks suppressed [ 1147.614560][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x3f, 0x0, 0x0, 0x0, 0x8, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x20000000, 0xffffffffffffffff, 0x0) syz_mount_image$qnx4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa02, 0x2, &(0x7f0000000380)=[{&(0x7f0000000140)="e9de59ee898773e65f8631ee76abadb3c4bf01ff0fbed902", 0x18, 0x9}, {&(0x7f0000000300)="0703bcd1ca3d40894a800d59f6ba92962fc452c0e76d10dd1636bf2780318e3e87d945cefdba03069c8ecd12c8955dda3e99757d8c48a73def541323d88b04e4997ee0ae04f86489ffbb9b6588a565fc08d9c87957d5", 0x56, 0x2}], 0x2804004, &(0x7f00000003c0)=ANY=[@ANYBLOB="262f2c402c5d7d2cb8a49657289b811032257b9cb3de2ee432a393aec073a7a7b3b2edda2c7c19a60f5a3c41917a13aed92c7b2c5d2d7dc22300493cf32c636f6e746578743d726f6f742c736d61636b66737472616e5d6d7574653d2c00"]) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x5, 0x80, 0x5, 0x0, 0xfffffffffffffb86, 0x200, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x20, 0x7, 0x1, 0x5, 0x5, 0xfff, 0x78, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r2, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) [ 1147.663410][T15937] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1147.756582][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x2000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:20 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000048001c00000019080001000000"], 0x24}}, 0x0) [ 1147.857067][T15943] loop1: detected capacity change from 0 to 5 [ 1147.871810][ T37] audit: type=1804 audit(1629276260.958:1481): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1899/cgroup.controllers" dev="sda1" ino=14577 res=1 errno=0 08:44:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000781a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1147.952010][T15943] qnx4: no qnx4 filesystem (no root dir). [ 1148.026253][T15943] loop1: detected capacity change from 0 to 5 08:44:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48014}, 0x40) [ 1148.089806][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x4800, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1148.142081][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:21 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000004c001c00000019080001000000"], 0x24}}, 0x0) [ 1148.329208][ T37] audit: type=1804 audit(1629276261.419:1482): pid=15962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1900/cgroup.controllers" dev="sda1" ino=14983 res=1 errno=0 08:44:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x4c00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1148.438265][T15967] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1148.457264][T15967] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000017116021 08:44:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000ff7f00000000000000f8ee220566bd9da8b7e35aecddef7468cd1ffe8a46a94f51dbe6ef38f6333026c46f208f1485b8bc4b62a2c4dc9c5d2d4b0a0e9733fe5809ec4b1da09f45f13402f46d9758a10912b629884f71a3e790e606199527f19e1252445dc414d05e8d332d14e16c98570ede97c872a47d3a6c6c612b71a9a89a96844a7c244d197d06c3faf5ff02b1171c8424dddfadbfde92a9a1321170931d2b70ab07921d29e84d65a45e03f933455dd14a5da74ecf1abb0a68997a707d72fe6a929d09e40834261a5ee8586b767696812e83217c214ae0f0c4412acaf0a0ff2031cdc22989eb245a070e51", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) [ 1148.502883][T15967] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1148.540591][T15967] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000017116021 [ 1148.547696][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.597563][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.621261][ T37] audit: type=1804 audit(1629276261.709:1483): pid=15962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1900/cgroup.controllers" dev="sda1" ino=14983 res=1 errno=0 08:44:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000781b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000008959108d66bf4359717390fdd194cba6c49dc76b6d534dbd475ec868f45cf0dc622962729abb8c28cba58e030002da255115cd735c1b18cf7ff114fdfbf94deb46e3f6178fcf0ee44a23173e2e520ed6a2e79143bead25500c05f0964ff8079d2f939aa8de0dd6e4f3866daea331efd9f49e28aab2950f03357246950b770a0ad18fcf25087be39273a6d57c044d4d6abfe999b92b999f6c56f8a94f8c8b761f0ef3dbbd37a778ed20011d3898296995", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f0000000080)=0x4) 08:44:21 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000060001c00000019080001000000"], 0x24}}, 0x0) [ 1148.796507][T15992] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 08:44:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x5865, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1148.942777][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.989051][T16000] sctp: [Deprecated]: syz-executor.1 (pid 16000) Use of int in maxseg socket option. [ 1148.989051][T16000] Use struct sctp_assoc_value instead 08:44:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x7f4, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x79c, 0x8, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x548, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "108deab4eed693205daf358d3968385ca38eaac7e0d5df85efce31da248eca51"}, @WGPEER_A_ALLOWEDIPS={0x504, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010100}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0208160dfc69bfbfaee971e10e78d43805705442e7d1e0ff68e0526c2b2e4b9a36321fee6201fe2cb5b02b9db76d3ebdcddcb3ab8f8fb5eafa7324efd37a", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000feffff1800000004002c80"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) [ 1149.016216][ T37] audit: type=1804 audit(1629276262.109:1484): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1901/cgroup.controllers" dev="sda1" ino=14990 res=1 errno=0 [ 1149.017335][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:22 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000068001c00000019080001000000"], 0x24}}, 0x0) [ 1149.083171][T15995] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1149.091200][T15995] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b5b8016b [ 1149.121198][T15995] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1149.145244][T15995] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000b5b8016b 08:44:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000ce46f61ee6d8518d52600", @ANYBLOB="2ee7281090038d1d8aa4d4f64976fc5cf7ba4c1ed5bc187b2aad55774cd8ffe530dc2715a7bd243ed7d5e660af0ddadbd40682c58b226133ea6685a5a802b21fb037850e3e12edb7bf765818fd6deffb90f8906abe55b836e110226d3293e71dee4b574904751fefb004b276cd2864a4757ed8dbb1e3387c8e07bf39cdf111ba0023c9c6ad1b5e03796d1a0ffe8cb2a64d1c1d523d56fdcca4460860ccaa85d9807a838e1acc9754b98497b7466fadb2f0c9dbe19b85ea5337650b392f186048b89454519c"], &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000), 0x8) [ 1149.392968][ T37] audit: type=1804 audit(1629276262.489:1485): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1901/cgroup.controllers" dev="sda1" ino=14990 res=1 errno=0 08:44:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000781c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1149.469567][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c41000e", @ANYRES16=r3, @ANYBLOB="000d28bd7000ffdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ffffffff2b0000002400118004000600040002000400010004000200040007000400050004000600040004000500e40001000000bf00be00b46fe4ce0e6df4411cf64ca1485304fe1b7629c13fa5e46e30967a470eb478922398c211ffd0430952a933e070ffa0f1afdf0e624b0a3ab4bd35001a3e454de12a7cdd1e55ffd2405a4059a0a0f2bcc9708bf1ddefcc6ac3c724587b9990779ea8b8e12ea967f82248ff8da6700405b92e491fe7a9297852f68680685c89bb2dead7dc1a663a944c036677a17cd196cf421599d3735430a7f298d854063b046733a6b535861b20d1ebb611f3fb43af6f4a589807a2939e6815e3e500060036000300000008001400", @ANYRES32=0x0, @ANYBLOB="0600120101010000"], 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x20001851) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x45, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x1c}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x2c}}, 0x26000811) 08:44:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6558, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:22 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000006c001c00000019080001000000"], 0x24}}, 0x0) [ 1149.648361][T16030] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1149.663335][T16030] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000076f70bb7 08:44:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1149.696275][T16030] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1149.731075][T16030] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000076f70bb7 08:44:22 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000074001c00000019080001000000"], 0x24}}, 0x0) [ 1149.832774][T16030] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1149.841010][T16030] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000076f70bb7 08:44:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6800, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) 08:44:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1150.034337][T16030] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000781d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1150.083712][T16030] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000076f70bb7 08:44:23 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000007a001c00000019080001000000"], 0x24}}, 0x0) 08:44:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6c00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x3, 0x820c40) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) r5 = dup(r2) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) 08:44:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r3, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff9, 0x35}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfa07}, @NL80211_ATTR_MAC={0xa, 0x6, @random="91386f78f8c2"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4c}, @NL80211_ATTR_SSID={0x8, 0x34, @random="580cf82b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "647ccebec0798b80d255cdb8556e5b61"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2e}, @NL80211_ATTR_MAC={0xa, 0x6, @random="239d9388bd0a"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000080) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x77b6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffff7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x400}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xfffffffd}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x4c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x18}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x2, 0x4, 0x0, {0x7, 0x1ffb, 0x0, 0x380, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x1000, 0x4}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80080c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1150.467264][T16084] net_ratelimit: 14 callbacks suppressed [ 1150.467283][T16084] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1150.566635][T16090] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:23 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000f0001c00000019080001000000"], 0x24}}, 0x0) 08:44:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x80, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010083a1", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7400, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000781e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:24 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000031c00000019080001000000"], 0x24}}, 0x0) 08:44:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1150.936409][T16102] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1150.959544][T16115] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c88e70414"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "c801f2b0f2ee"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5727e2f1d0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32ead744fa6b393c2423088e4b"}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5f3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x513}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1c400000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0xb4}}, 0x108c0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xe86}]}, 0x30}, 0x1, 0x0, 0x0, 0x8809}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, r1, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb9167ec284cf5688f23ada8cf2f1bbe52b406814433dad3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b400ae3439c5a3137abf3261ab09ef7f139aab1d4696ef57"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e30f4e5384469a9d68d4322e9a42de121a7d2d964ebf4212"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e31534f406d23c9cf1dcdbfb9ea01b6dd926d7879354561f"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0xfc}}, 0xc4) [ 1150.994083][T16102] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000da90e4ee [ 1151.014551][T16119] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1151.060383][T16102] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:24 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000051c00000019080001000000"], 0x24}}, 0x0) [ 1151.100400][T16102] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000da90e4ee 08:44:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7905, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1151.144711][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1151.144729][ T37] audit: type=1804 audit(1629276264.239:1490): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1904/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 [ 1151.310518][T16102] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1151.345860][T16102] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000da90e4ee 08:44:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1151.366647][T16133] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:24 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000061c00000019080001000000"], 0x24}}, 0x0) [ 1151.438308][T16102] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1151.470760][T16138] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1151.504036][T16102] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000da90e4ee 08:44:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7a00, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1151.642657][ T37] audit: type=1804 audit(1629276264.739:1491): pid=16124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1904/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 08:44:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000707000/0x4000)=nil, 0x4000, 0x300001c, 0x810, r1, 0x2c526000) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={r4, 0x6}, &(0x7f0000000180)=0x8) 08:44:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007823) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:24 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000071c00000019080001000000"], 0x24}}, 0x0) [ 1151.778198][T16151] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1151.862522][T16157] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r3, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r8, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000002200)={'syztnl2\x00', &(0x7f0000002180)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x7f, 0x40, 0x32, @remote, @private1, 0x10, 0x40, 0xffffffe0}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002240)={0x7c0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x95a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x5, 0x4, 0xfffffffe}, {0x200, 0x9, 0x7, 0xfffffffe}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd371}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r11}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c45) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:44:25 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000091c00000019080001000000"], 0x24}}, 0x0) 08:44:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7b01, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1151.970021][T16154] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1151.975238][ T37] audit: type=1804 audit(1629276265.069:1492): pid=16158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1905/cgroup.controllers" dev="sda1" ino=14980 res=1 errno=0 [ 1152.006584][T16154] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000007c874428 [ 1152.151272][T16154] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1152.195991][T16154] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000007c874428 [ 1152.199696][T16169] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1152.231688][T16172] sctp: [Deprecated]: syz-executor.2 (pid 16172) Use of int in maxseg socket option. [ 1152.231688][T16172] Use struct sctp_assoc_value instead [ 1152.306223][T16177] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:25 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000000a1c00000019080001000000"], 0x24}}, 0x0) 08:44:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x100000000, 0x4000) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x4b, 0x7, 0x7, 0x0, 0x8, 0x1c103, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x1}, 0x4000a, 0xa41, 0x9e, 0x1, 0x4d, 0x8, 0x9, 0x0, 0x10001, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="001700006e76c8a8daea052f55c8a69302aabc9ec2aadcc27573181e26f04987f96754f009c36cd2fb10e5ae42ec09625ac5b56bcfeae8b0d1d10bf318df1bb24939272fc1bef1ee78410b0d356a9a6ce7398b6890681ce22c3676f9a3a689acec3ac383bd6692951921374c434ddba8795db4df32943ef5edc5df5ab33e133971fdad2356e959b047224d6ee62ca2cfe666aef67fd43cada9a63312791484d4a8d32e9fcb38d3abbe3f14cde0a45fbe15376804078366155081beeb04bc7e7cd9205404d6de79e4d72fec9e31305ce2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xd, &(0x7f0000000000)={r6}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20000, 0x100) openat(r8, &(0x7f0000000340)='./file0\x00', 0x9000, 0x0) openat$incfs(r7, &(0x7f00000000c0)='.log\x00', 0x80000, 0x8) 08:44:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xe, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1152.420497][ T37] audit: type=1804 audit(1629276265.509:1493): pid=16158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1905/cgroup.controllers" dev="sda1" ino=14980 res=1 errno=0 08:44:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x8100, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007860) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006280)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006240)={&(0x7f0000006200)=@getneigh={0x14, 0x1e, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000006380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRES64, @ANYRES32=r2, @ANYBLOB="04000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x4014021) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000780)=""/206, 0xce}], 0x6, &(0x7f0000000900)=""/97, 0x61}, 0xffffff28}, {{&(0x7f0000000980)=@tipc=@name, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/166, 0xa6}], 0x1}, 0x9}, {{&(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/183, 0xb7}], 0x1, &(0x7f0000000c80)=""/121, 0x79}, 0x1000}, {{&(0x7f0000000d00)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d80)=""/162, 0xa2}], 0x1, &(0x7f0000000e80)=""/206, 0xce}, 0xffff}, {{&(0x7f0000000f80)=@ipx, 0x80, &(0x7f0000001300)=[{&(0x7f0000001000)=""/135, 0x87}, {&(0x7f00000010c0)=""/84, 0x54}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/235, 0xeb}], 0x4, &(0x7f0000001340)=""/4096, 0x1000}, 0x68222b52}, {{&(0x7f0000002340)=@nfc, 0x80, &(0x7f0000002580)=[{&(0x7f00000023c0)=""/41, 0x29}, {&(0x7f0000002400)=""/83, 0x53}, {&(0x7f0000002480)=""/222, 0xde}], 0x3}, 0x800}, {{&(0x7f00000025c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/200, 0xc8}, {&(0x7f00000027c0)=""/109, 0x6d}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/230, 0xe6}, {&(0x7f0000003940)=""/253, 0xfd}, {&(0x7f0000003a40)=""/8, 0x8}, {&(0x7f0000003a80)=""/151, 0x97}], 0x8, &(0x7f0000003bc0)=""/20, 0x14}, 0x1ff}, {{&(0x7f0000003c00)=@ipx, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/189, 0xbd}, {&(0x7f0000004d40)=""/149, 0x95}], 0x3, &(0x7f0000004e40)=""/4096, 0x1000}, 0x517}], 0x8, 0x200, &(0x7f0000006040)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000060c0), r0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xfffffffffffffc47, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0x1}, @exit, @ldst={0x3, 0x2, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xa, 0xc}, @exit, @map={0x18, 0x0, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfce1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xa, 0x7, 0x8}, 0x10, 0x13412}, 0x78) recvmsg(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[], 0xfc30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000062c0)={0x0, 0x7c7, 0x921c}, &(0x7f0000006300)=0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000006180)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006140)={&(0x7f0000006100)={0x38, r5, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xacc}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x9, 0x2, 0x7, 0x984, 0x0, 0x7, 0x2, 0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}, @NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xe7}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x3f}}, @addba_req={0x3, 0x0, {0x40, {0x1, 0x1, 0x8, 0x9}, 0x1, {0x0, 0x2}}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0xcf0a, 0x0, 0x0, 0x0, 0x8, 0xa, 0x95, 0x0]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) [ 1152.618689][T16189] __nla_validate_parse: 19 callbacks suppressed [ 1152.618708][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1152.685709][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:25 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000009f0a1c00000019080001000000"], 0x24}}, 0x0) 08:44:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1ff, 0x80000) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003d5000/0x1000)=nil, 0x1000, 0x0, 0x4010, r3, 0x6ba28000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) read$FUSE(r1, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x21, 0x3ff, 0x8000, 0xc4, 0x8, 0x100, 0x3ff}}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)={0xfc, 0x9}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0xd, &(0x7f0000000000)={r7}, 0x8) [ 1152.828094][ T37] audit: type=1804 audit(1629276265.919:1494): pid=16196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1906/cgroup.controllers" dev="sda1" ino=15018 res=1 errno=0 08:44:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xb817, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1153.051148][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xf000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1153.107629][ T37] audit: type=1804 audit(1629276266.199:1495): pid=16196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1906/cgroup.controllers" dev="sda1" ino=15018 res=1 errno=0 08:44:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007882) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:26 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000000c1c00000019080001000000"], 0x24}}, 0x0) [ 1153.247035][T16213] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1153.287570][T16213] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008ae1be84 [ 1153.374295][T16213] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1153.398124][T16213] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008ae1be84 08:44:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x34000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1153.472996][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1153.530094][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x2, 0xffffffffffffff55}, 0x800, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x28) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000200)={r4, 0x7ff}, 0x8) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60, 0x80000) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x1000003, 0x810, r5, 0xaa1c5000) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) sendfile(r7, r8, &(0x7f0000000040)=0x6, 0x6) [ 1153.586991][ T37] audit: type=1804 audit(1629276266.679:1496): pid=16234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1907/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 08:44:26 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000640)={{}, r0, 0x18, @inherit={0x88, &(0x7f00000001c0)={0x0, 0x8, 0xfff, 0x5, {0x10, 0xaa, 0x2, 0x2, 0x5}, [0x5000, 0x26de, 0xfffffffffffffffc, 0x9, 0x5, 0x5, 0xebd2, 0x40]}}, @subvolid=0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000100)=0x62b) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:44:26 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000000e1c00000019080001000000"], 0x24}}, 0x0) 08:44:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x400300, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000002c0)={@loopback, r3}, 0x14) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x9, 0x2, 0xc0, 0x7fffffff, 0x3, 0x3, 0x2, 0x2bc, 0x40, 0x3c0, 0x1d2, 0x7, 0x38, 0x2, 0x5, 0x1f, 0x8001}, [{0x6, 0x7, 0xcf, 0x7, 0x0, 0x6, 0xfffffffffffffffb, 0x8}], "3044157ad49f1dba576761de3acb93c8fa0932c70d4313"}, 0x8f) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) openat(r5, &(0x7f0000000280)='./file1\x00', 0x40, 0x86) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01180000cdbea1b61c7f8e79f471d6c5a08d5f5954e7cb8dc086b572a11eaaa2770b25b3aad6579a768708ed19eb83d76adf7743b2f2698630779e54402d4abb2a7d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0xd, &(0x7f0000000000)={r8}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x10000, 0x0) [ 1153.952057][ T37] audit: type=1804 audit(1629276267.039:1497): pid=16234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1907/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 [ 1153.978966][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1154.027494][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x1000078ae) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:27 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000481c00000019080001000000"], 0x24}}, 0x0) 08:44:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000bf161bb3c24d39e86f4392e267f915651b375d780ffe75b03fb56ae17de40192d7f3b3e2b05c0a2dbe34d6810f402237a330f39b7c2692c8c88130fc7510e284994e52de0e9b5e9897", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xe0ffff, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x13, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4094) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1154.383877][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:27 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000004c1c00000019080001000000"], 0x24}}, 0x0) [ 1154.416367][ T37] audit: type=1804 audit(1629276267.509:1498): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1908/cgroup.controllers" dev="sda1" ino=15033 res=1 errno=0 [ 1154.459246][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1154.459647][T16278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1154.532944][T16278] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000003e06216b 08:44:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x204, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3b}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x153e}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x10001}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x3}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd5}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1154.744537][T16278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1154.803937][T16278] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000003e06216b [ 1154.861327][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1154.875867][T16302] sctp: [Deprecated]: syz-executor.2 (pid 16302) Use of int in max_burst socket option. [ 1154.875867][T16302] Use struct sctp_assoc_value instead 08:44:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x10000, 0x12a) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x0) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:44:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1154.998921][ T37] audit: type=1804 audit(1629276268.089:1499): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1908/cgroup.controllers" dev="sda1" ino=15033 res=1 errno=0 08:44:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x1000078af) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:28 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000065581c00000019080001000000"], 0x24}}, 0x0) 08:44:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x15, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) mmap(&(0x7f0000399000/0x4000)=nil, 0x4000, 0x1000008, 0x110, r3, 0xa394f000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c, 0x31}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:44:28 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000601c00000019080001000000"], 0x24}}, 0x0) 08:44:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x16, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1155.423299][T16329] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1155.455078][T16329] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000002ba29dd6 [ 1155.512252][T16329] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1155.551712][T16329] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000002ba29dd6 08:44:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0xa4000, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41000018}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20c0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a8e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) [ 1155.622127][T16341] net_ratelimit: 16 callbacks suppressed [ 1155.622147][T16341] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x1000078be) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1155.755145][T16351] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46802) io_setup(0x2e, &(0x7f0000000400)=0x0) io_submit(r6, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x790000e0, 0x4, 0x1, 0xd0, r5, &(0x7f0000000000), 0x1a31e3fd987a7d49}]) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x6e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x90}}], 0x2, 0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000040)="62f7b59e9ccaca27bde3c7ae2d3cc9186df3a8020805020dd67252c197dba9ed8a1b1638378f24ddea627882533c070b8276afc04d9ef102347a44b0f55ec544133ae550e2832064d8d796d00d68c0e1cd0054793906e9a8d464e971bd98f2342bd6f337c8044254693299adfe24c338b1b53ffd114f2f6d782cc6b854cd77e9af70c661e22cef6190b26eae8dadaa29f24e61ee816f0b76d012d21fdc7ffdbc114fbc7e8463e6368bd2b20588069dd43f2540bc0888de5963690a7722c5f7a36884a382ebb53086d1f22e84fc94b2826e4b312be04131bc7cd498973b0df3381d0b77cf03c4ee9ac8b751", 0xeb, 0x81, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3f, r7, &(0x7f0000000200)="c865d4498be50d5819059fc04c7f7c7d65cfb96e91853f89ede190b7540584c12f3921becaef3337a6c337db106f1662b217b075352d1b61312402e71f745e0537de04ffb12c", 0x46, 0x1, 0x0, 0x2, r0}]) 08:44:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:28 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000058651c00000019080001000000"], 0x24}}, 0x0) 08:44:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x3000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:44:29 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000681c00000019080001000000"], 0x24}}, 0x0) [ 1156.033952][T16359] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1156.060122][T16359] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000001ab0c860 [ 1156.105695][T16372] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1156.284802][T16359] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1156.293897][T16378] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1156.317828][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1156.317843][ T37] audit: type=1804 audit(1629276269.410:1503): pid=16365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1910/cgroup.controllers" dev="sda1" ino=15050 res=1 errno=0 [ 1156.368166][T16359] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000001ab0c860 08:44:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100007800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x19, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1156.472830][T16359] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1156.495634][T16359] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000001ab0c860 08:44:29 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000006c1c00000019080001000000"], 0x24}}, 0x0) 08:44:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x266}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x286, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_a, @broadcast, @random="9325286b2821", {0x7, 0x8}}, @ver_80211n={0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, 0x54, @default, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x3, 0x0, {0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x4, 0x5}}, [{0xdd, 0xe0, "87a133e3dc873b37f45c95be12b689e03df91842c6f9ede75c201e25b57a2cf2c4757366169efe26e3db34a31abbb53de1a0cd6cb0facbae6f0d364950a0ce1740050e6118c102d808c1292796cade85693b3192392970ca469641b1cd71dec46ff86a0594acd1de5dbbed054ef50e840f5749bd82ae6c9b08a8e21410bd93b5cffa0da5b6b670742247fc3d4484a1449739b318b6f1a413a9a7f798f04c5664f77acb52174e657c1ee93344f4a5ff8e9f5ce0a9a45341a7557a22f1a0ad688321d6d31f0bb8bf422f2d96c6d7d4eb7a2689c73c33318fb2feffe4c6696004e9"}, {0xdd, 0xfe, "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"}, {0xdd, 0x1b, "fa5e649c513e20d40a1d64ad67196eee596f8235750051e82c6f96"}, {0xdd, 0x43, "809679836827cf51159cd5d6c8474c56bb6106f8935a79bf319e4a7fc540701156287fe76d85a872ce080777bd90f89289454804549f2de76b89cccf5576a9a5e41794"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20004881}, 0x8014) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0xf5, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/udplite\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0xb15, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=@dellink={0x5c, 0x11, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x2000, 0x1}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_EVENT={0x8, 0x2c, 0x7fffffff}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x7}]}, @IFLA_GROUP={0x8, 0x1b, 0x1400}, @IFLA_EXT_MASK={0x8, 0x1d, 0xd4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}]}, 0x5c}}, 0x4000000) recvmsg$unix(r3, &(0x7f00000007c0)={&(0x7f0000000580), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c65d98a4e0d00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff], 0xa8}, 0x2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20008081) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) [ 1156.558385][T16364] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1156.612003][T16364] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000001ab0c860 [ 1156.659918][T16359] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1156.689796][T16359] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000001ab0c860 [ 1156.749914][T16401] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1156.787896][ T37] audit: type=1804 audit(1629276269.880:1504): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1911/cgroup.controllers" dev="sda1" ino=15050 res=1 errno=0 08:44:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7bdf, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000352000/0x1000)=nil, &(0x7f0000525000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:44:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1156.900460][T16407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:44:30 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000741c00000019080001000000"], 0x24}}, 0x0) 08:44:30 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x5000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1157.201002][ T37] audit: type=1804 audit(1629276270.290:1505): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1911/cgroup.controllers" dev="sda1" ino=15050 res=1 errno=0 08:44:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="11fcdab3b65300010000000000002a1d522ddaa0072175e42e1a104e6a529fc5d5492b87475114a2a8981bf53ce78b08c90e408f5a4702fe646166d51ea2cf6001606d156cf09db6", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}}, 0x4000010) 08:44:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34e8df3e58479da1212ffec1c56f0dd6feaa6834a915fb2a80f786cdcf3bc8992ba6eee163facb7f21719c1d340c4b9da5ccca748c9dca7e4710b0cc938e73718ccf8d737c3d50ed81aaf8ae55453f415c32f39c54ae5e8f696009b145259db7075159b404b12c406cd3c99f7e3dc4e3d900c35ef8b7bcf0", @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1157.369281][T16428] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1157.467634][T16434] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:30 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012000100000000000000007a1c00000019080001000000"], 0x24}}, 0x0) 08:44:30 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x6000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1157.626557][ T37] audit: type=1804 audit(1629276270.720:1506): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1912/cgroup.controllers" dev="sda1" ino=15053 res=1 errno=0 08:44:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="16670ac91d29c66d9c4fcdbe3aa1303c9297bf0f00b4f290cdbd7962845938f9a0d5e3fe3c604b2c3775c6004cd8c79df2e7ffab9a1ee0dc4729dbf6623aeae051b3fa1d1ca918e3229e57912e1ac97ad1cabde4acf9ec0d225476a86ac0aa52a6cc8750b800f03b99cfb0c9588ec5f4edf3983018a3047e5c45eab8d5d030da7145647f6197637cbf16b0021ef6b82f421f070ccb35c22e7ec9a0cfac793221c30ea31b6a80831bcb4dc8155545c3515918329d", 0xb4, 0x1000}], 0x2002000, &(0x7f0000000240)={[{'$$$.!-\xa0'}, {'^\''}, {}, {'-*$'}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@euid_gt={'euid>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}]}) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x300, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) [ 1157.744764][T16448] __nla_validate_parse: 13 callbacks suppressed [ 1157.744781][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 1157.868012][T16454] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1157.931637][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1157.961631][T16455] loop1: detected capacity change from 0 to 16 [ 1157.967472][T16460] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1158.059359][ T37] audit: type=1804 audit(1629276271.150:1507): pid=16466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1912/cgroup.controllers" dev="sda1" ino=15053 res=1 errno=0 [ 1158.099440][T16452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:31 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000811c00000019080001000000"], 0x24}}, 0x0) [ 1158.133502][T16452] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000051f5b744 08:44:31 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x7000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) r3 = syz_open_procfs$userns(0x0, &(0x7f0000010fc0)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000011000)=0x0) syz_mount_image$nilfs2(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x3, 0x5, &(0x7f0000002600)=[{&(0x7f0000000440)="490dce8f74eb787aed33df29e07ba8b8096e525bdd8076855ab08e4666d4b390b3ea6e20298cba9e1711f15ca3d369a3e6815399f85f345a19ee399f521e9f5ee21c1292bfe71bea3c23e05806487ee0b4e10eacfc3485e4", 0x58, 0x8}, {&(0x7f0000000500)="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", 0xffe, 0x9}, {&(0x7f0000001500)="a1a59ba79fdf8da2f3646809ab9c5a58883bfefe260cbce1fa5f23976a2b5a16b86b3d79cdd802ba6e7d536bd59b59d660de291e19292b97f79db1c222e9527b7771bbeb13dc7ef23556097efeb89549afb846b3a329fc3ac1d3a9226963f1efb0f0f4fcc00a8bc47930f5336d7dc43979b65b0f6ef1b1bfb23fbb76b4795fbb9d0db75aeaf0cbf599b9f145a38bf790f20328284640", 0x96, 0x7f}, {&(0x7f00000015c0)="b42e4be6c64ec07f7980bf66b02f0d27d4ec8817897e97742711c107511147a61aafd833a50fc20c05bac5a23783202f87b00889f6329fdfcf5374021866a16535a37a59d4af1bad568c24966e603f365493c812cc316c498cc3f3795af8122b4dec652079f2958fcc3bef092fdcd6be45522b3ee202277e716de9c669353e590445f2cbd39ec90f99dab11c1348c1981ffee7ec678665d77cbdb35f54094ef1911aeb63c796897edd31d78a838cd43d6ad7f588368861cdc483ad4328338f62de6527b871f52013be0468255f9a18617a29928ffa8ddc4ac49c64833c2f164af4b5a854dedb5df22a3ab99373759311cae785a91eddbcaceb45592efb0460fcc6f2b570265dcebe8413a23b3a2e0cb25cb3e5cb388bd54dc69ac0036eb38f4ab5e33bddfc856d1d131c93dc9a22d6f1e214f8125b5ba1469e9204e9792ac1565b92a48df7bb7c7622f4eb53f0e997460a54e42fa73e7a643c63f20ce00c6113f113bc27b6fe977a584df1d4102ec8a0b88d3c8f7901de5d894920ea4859606354483203acf1ff696ace23e1037d06d22ae4cc63e357a64a03dc8cd214a42a77dcef34648bcc645860ef12ad4a4a9a2b7ebfd39c41ca2f3ae2061ade1c0cb26ade10729c27161603c029ecb6eec58de7eb196425de7eb2010d1e28008f8af42f19e5660b5cd29097b842efcf59d888ecabd3dec66e0807f5e9c8ec7bb65dc70f883ca370bcfb5bafe2414fd82cb49aa9ac7f3968134f5a098057bcc4a49e1ffb624ca8e28b421799c7f68ff370ec78c9c36b3f4b4bee362cd052d709901482918ef0cb53fd4c2697e057844a8d052251495ebbcdd337494a9193f1368efb334b75563bab7e67bef3e5fcc9a23cee343600792b45a64d73bf8c1a5542e557d5e24f90c1e19f3c0ee3174feb586e6888e7135dd129354cd1cfbcded03c47a5e23b75a43ea113ff04fcd72772fa3354db7e0ba4020096f815f11c54686da55c76e817e3e04c8ed659fc76d10f4abaf2caf7bc0a4e549f4f958771aaf056ec2c1e922ddee538c4a78d4bdbbe3a3b485123142d01d2cd91c2aa0c546ca143d9a7c919079736a55df887e526c0526f078a9a32e67ec5d9f81dc820338f85780cbb16780fd338aa5e3362190de97c1c5ebdff9a24f4dca270688ddb362b7acc2287376d7e6bc01e27a9e0616789e54b7f24264c791399e930b9f911dd3a86804eed02e944ffcee12aa1f6cd5d34ce2c649aae8fff5b21733754b4848ea5ff3755cc38e91a3c5728ca136b86db1ff6f065bc48b7f748a31c3d4082ac761b3965822fbfe379b8eac9e5b2c2f4c3a832c125dfeced905ad4e5e08d634060c93453079568cd92c7ccb8ff2d726e3e0d28799b6efd2e755473594e6d33e34697bc58a31a561f40ef0efb469eb8ff55948bf4d4f2ff4977fa41c98f6af2912767904fe072c9ff0461655e9af61b0afb661aeb8e74d247d9da3478708d336aeb419f6e7bbaf47942581aedf00f21884a1f46733e99a3029273f9162910356f3835e90ca753ec18808a00397500ff461d25fbd3a4ab74e2405c322e272e9eca2953059ba84733ae891c8456e48c69db522c12b234e897ae687d67e23084aa76251af873ca849511dca73dadb64eee7c7b1e987023ce95fb545987a316013f3bd8b3298704e74ed7a8c29ca06963d86303fb65c66ba58109413485be002efd5487b5dec0bd582b6143cc05534d9e81483d296b71413bcb6847bd0d720572ecff8893500dd070514dbf363612955c514a3332ef2ac02c016a7d12194347186d75de26d1d399b72e74eeb59b54c89367c9b99a62c4a4bcf1d4a40661fb56b0e8375e64d3c048055cea2bb927c24eca89a93cfb8c596146b2b18391adba3c859692333a7632a05d2cd1e077acbdbeb65b112d7371325dca681a1a535892fb1f0d53b3be69d47b6dc47b7a77028f26af13c58b7bc30c26437a1a2c4ef67d74adac9c6ad8a51e6e4b60a682a128c515929eb85fa2375730c91eba06b94aad15432924a7f5eabbf75b3b13671478ae4cf762a6c5befea8ac2a33c7ea41accc5a6274b59d897bb4b46d8ec6081015af5ff6fb5b8856e1425a6be82abc65403ca7022310ee3d61c13d7925e5a59ee5d78671f8c81e7e84b6c919284896625373531809c8666c977259800f7b2267dbfef60a0c311d10e7f6b285a4becec39b7be22bd4c893eded6a590c8a839b70bf6129c91e274586dd6f2e4534d23f9f12753082aed041f8532f74b766f2a0928df459f584ec27be2f4a259fa6a3cb22403b28b1488379bec252a527ca6c7c7fb1f389172a09bacdaaf8494eb59e56aeef731d5a19ff062aea3fc71bbcbc73473be68c9535f7bcb14be3b8124df31a7cb852d64b02d6ee49aedeab1de29f4507f2bfae158a4649a2c98f676b3d7b7099439fddeac18bfaca5aa7f0dfd9bde46f979159c33dc7e2b03caf9c4c1cf74470f246340a6d207680c9abc7f07cc5d2fa12f68a957e9e2f87ad858fd274793e2c41fcd9c6add17b4705889d17f0d00b3203bcd62b7b0dc3cc330317da8951b0a725dc2cf35e94e6fcd1a44fdde7e88bd416e819647411f1fe5e2ea62475d141a8e3c5d316c8a7bb9694aee07f92f30875b1a8d282cde1023022135b7622e305bad5d50cc76a6312f891c80153149459667708ce907b011edc82670f96fb6e73de7b08a3714f896d8d8df2fda639e1577e713d3ea70455fa92844c8679cc404e2002776c2327693233e4ec40e5e32e6ac63a7709325c2f49607b0ca81438fcf29e99eedfbb693d05b37745fd2be7b8f273296a4ff1af4d07bed781ea6afa060bdbec0b3e0660a89f87ceabfafdf29f986c3608d9d2c3ccc2add8f975e6ab837e1ca7283ab3ba25931a42a5e0cbe6db8eb7db8ef43b6d73907af0b1b3d1dfdb12b7ff5d1f4be019973e80e871a5a19161c65785d2284ee6eac73f2c0f3808a44dcb10beeb3c75624f53c09ca8cb091a7027806a36ccdee7253f4c5ec709c828565ce904c0db4a334e9aa37b946bf1444be0b8ccdf18f88874f9ef444ea612e258f5e15a34a3580eef0c46db74991a97df323fa4d2c29894104bfdbb38317878806af3a1c0ed77454e4dc2f803ec6c6dd2db145b6df00f4e27617d098ce688ae51ab02632851b5d5ee0cb220337280b47ca491220509c4230ab0acc093b3ca3e66e1e746c468f1b678f2fd9e9ca7276d4e47c279a074fd1c59eb6a87bd48f00d1c50bf0c53dba9b116718b84175885f08a70dc553dc4fa03c75da9aa101e465775d156b979b6c7673deb21e0918d8ec44aa94958215c12c2c9d3ed1d348d9de502540c8c903f49c567b373061d8cfdda9e60c29b5469dba4e9fcd9506e1c454847b2245a30e39e5a2e2bc7ea76b8dad35b5919bf2f3ce90d00829dbb561dbca2ec71bce5c03eacdf84459d3e21358e9db66fddfbbea8b54a0d4e3bed00e96a5c40c3f712bb9b69532ba5fadd3bcb2581ee3212c6238dcf797670611e6e26d07127a8b12122d8542247b9297f5ca07be215c8b4d0f3a453d4b17073c2b72fe1f492f8ac3494549332b197a2a966cc9421bcd71f26eec8beeb49fc3e831868e8768d51bf2e9cc8dd2f4f3dd8aa6ca1765bd357c7c83eaf0bf211917e34984f55788f235fbb11a60200b73ea2a6d6f8d639cb9e3ba5aa2803cf26156c0c4b8c949aa037b5875e8105b24a987fe81b272d3551385ce55f530c0c7240ade8ecc80f7bf74688fc4e0e8e6ebe2ca1b91b55f8d3ff224018959e562ed41edd7bbb5593ec8b5ab7380a1056804c816a0e61f7af1e6844f68f0d0f2497a6c472ad762ad9dc68c72dc838340a049dceeae3b80904da83c02d2edf99828f927803c1e603f47bded736d3a26ec01d1319ecf589606a1b52e07590391b61c81c36fd77266e83d3d7f722e8744cb342e0f74ce75bd1c6c027d29d7ff72ce9a37eae53dbdbdf45158cb079df13650d0c390bf4426f84d6bb52a2ac2c1fac170490cd476491f54fc707d6baf019f384f9ffc4b2b1a61903d11c204664c5d6ca0cb063ff365aa0363c1bb2e5000e9bdf7bc123b408b373f9e3e162b056fb5b9d5f9db51f3d300c3449851144b0c10805227dfdc4c44171b999ecd39cc6c1491256cc68d6b2d862ad6da556dbb9ce5d069419f5ff6f09491add96d4b2d8951dd320543a9e9e9cfedcb17275d086cf56d48c4a1aca8f3a7404783c2a62823214d8f400771f5900fd524b8da81a5e127df3b0bb5a627979c0d64fd4f79766108b7cc19fb1d542134602578c0fc535cee6fae60eba741fadb40b3a43b5f3e1912996c0901be54cd1c62e06831fe4581a60801448788c8ea6006133479f769d6ce2df847c9b29636840f6fd6403c3cf0473cf5ebeba4da3050dd8648fbba6ae946cc8366a728669e1880e96cac955dab858097ba4530d6602efc2f2143ad9d3c8cc87287800a6cc719ce98734a1914d1ed98bed9d75608cdea66808a04dd9825fccfb16b4fc315d1496e948bd4c8fad6cc449ca956e0facaaae9b780ce0fc86e2d12c2caa85014afb9de4ba154b5b11599acf1db8d322bac5c9332ee9cf5a30dadc6346ccf802b65749effcbec427b191c1829720a2313baff9d1526dcdc0b0fc68acc8cf99d61dcf0dad61a98c30a277670bc8420abf363ac3646a9b839fd244f37da0aa8067eb4987917401717e2c159c2d348f7bff9d56d5a1b1c7b14dc4f29df0138c4c3a73929a7b3f0b7e73190b2d00f39e6891b3c3d35b49ddd993fdea663ceb94bc32731288e1af5cb2a41afa48afa82eb65ae13ba748356867484c07a2fc872af82ee84548044ea38e1aec39d6d9c1346d42165147583b2ae1cdb1fa36dd1bbbe4daf1812d6e6fde5b3df376e4c6fadb66add8761767066904b0548437d1fa2d94a4694ce1ebb72bf1e00a22c14dee4f5e8eb5bef580c51dc6a2576cf7fa6dd2d81052c6fa13b93f2e7f1c39dfffe14491bd432811e3dcd05b8ae9faa4184ffff654099d5c6776a949868e0e02fdc5bdce09df67e9ea43355c64c5bf4a876003e1a85b341775d7df6c0a6e29187fc8ba740fa15f4effcd9e63f3b140ed902dabaed4ff9ba9212e59e20f5f41e64eab6deec5b43368ea5037a2e584a487efa0a473aba4f9c52ae858a30f62e4e44c4aa509dbdf281dc324654f933544900840c413022ca769aecc544dbf63ac87b64400b787d4e8a77c4ced192b87cf195a565c5dd0aa564844bc3eedb0d224c9949cd50888dfff5992fe2b8509d2603e1a306d61d08e6085ae32cfbedf69ac8db3764d3afba7580ed400f104c5a9d7a9eac5eef62bff52a87cb566ae13c130f7e597e23265eef92e02b30719b0dfe835f6b3dd75eed1da115aa1285f09f7ad446eadbd0fa3ffb839d47357a5cf69603b2ea74bbf19057d4ba3008f916dbd608f684034259b6e2568465fa73a9de44a8c5f4cc1bd2a67eb4f4bbe92c5158572c385b0d0dce984f86dfb8ffb1a920bc8edae1d44440c94c1e0ca93dc67445cebb05031aa64a9e5685e30c56bf77553566285f6ca0df52566b991c495e47ba8d171c498bbc3b15902481b757da211b2009d9a43903a2a196f64e787ca613336b5cf0cf8beed11937db2912296d2eb9b3861b42858077c9a68e009eeb0cfa0031a0fe748e7c8430c36a9ba1699180ae60ba815de6e7b2340ef5d5d778e0cf1ff7fb06b1e33300c7d46aae4a696345f0df70e13a07cbd24e61c679ee10f440c27c3af30d11a8b4e65e94217c3a5d9b48d2f7e3e9c426178f0e1a4f0006538b0f12aae297e06d974d7fafe11c0", 0x1000, 0x1000}, {&(0x7f00000025c0)="447861683822858d2656d6c3496ea3de7e015279cf2c1b1a1d", 0x19, 0x1ff}], 0x19, &(0x7f00000026c0)={[{@nodiscard}, {@discard}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x33, 0x64, 0x30, 0x66, 0x30, 0x34, 0x38], 0x2d, [0x66, 0x0, 0x54, 0x61], 0x2d, [0x66, 0x61, 0x34, 0x66], 0x2d, [0xf186ce046d91bd3b, 0x34, 0x37, 0x36], 0x2d, [0x38, 0x31, 0x38, 0x62, 0x35, 0x34, 0x37, 0x39]}}}, {@seclabel}, {@euid_lt={'euid<', r4}}, {@appraise_type}, {@hash}, {@obj_type={'obj_type', 0x3d, '-'}}, {@dont_appraise}]}) r5 = syz_open_procfs$userns(0x0, &(0x7f0000010fc0)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000011000)=0x0) syz_mount_image$nilfs2(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x3, 0x5, &(0x7f0000002600)=[{&(0x7f0000000440)="490dce8f74eb787aed33df29e07ba8b8096e525bdd8076855ab08e4666d4b390b3ea6e20298cba9e1711f15ca3d369a3e6815399f85f345a19ee399f521e9f5ee21c1292bfe71bea3c23e05806487ee0b4e10eacfc3485e4", 0x58, 0x8}, {&(0x7f0000000500)="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", 0xffe, 0x9}, {&(0x7f0000001500)="a1a59ba79fdf8da2f3646809ab9c5a58883bfefe260cbce1fa5f23976a2b5a16b86b3d79cdd802ba6e7d536bd59b59d660de291e19292b97f79db1c222e9527b7771bbeb13dc7ef23556097efeb89549afb846b3a329fc3ac1d3a9226963f1efb0f0f4fcc00a8bc47930f5336d7dc43979b65b0f6ef1b1bfb23fbb76b4795fbb9d0db75aeaf0cbf599b9f145a38bf790f20328284640", 0x96, 0x7f}, {&(0x7f00000015c0)="b42e4be6c64ec07f7980bf66b02f0d27d4ec8817897e97742711c107511147a61aafd833a50fc20c05bac5a23783202f87b00889f6329fdfcf5374021866a16535a37a59d4af1bad568c24966e603f365493c812cc316c498cc3f3795af8122b4dec652079f2958fcc3bef092fdcd6be45522b3ee202277e716de9c669353e590445f2cbd39ec90f99dab11c1348c1981ffee7ec678665d77cbdb35f54094ef1911aeb63c796897edd31d78a838cd43d6ad7f588368861cdc483ad4328338f62de6527b871f52013be0468255f9a18617a29928ffa8ddc4ac49c64833c2f164af4b5a854dedb5df22a3ab99373759311cae785a91eddbcaceb45592efb0460fcc6f2b570265dcebe8413a23b3a2e0cb25cb3e5cb388bd54dc69ac0036eb38f4ab5e33bddfc856d1d131c93dc9a22d6f1e214f8125b5ba1469e9204e9792ac1565b92a48df7bb7c7622f4eb53f0e997460a54e42fa73e7a643c63f20ce00c6113f113bc27b6fe977a584df1d4102ec8a0b88d3c8f7901de5d894920ea4859606354483203acf1ff696ace23e1037d06d22ae4cc63e357a64a03dc8cd214a42a77dcef34648bcc645860ef12ad4a4a9a2b7ebfd39c41ca2f3ae2061ade1c0cb26ade10729c27161603c029ecb6eec58de7eb196425de7eb2010d1e28008f8af42f19e5660b5cd29097b842efcf59d888ecabd3dec66e0807f5e9c8ec7bb65dc70f883ca370bcfb5bafe2414fd82cb49aa9ac7f3968134f5a098057bcc4a49e1ffb624ca8e28b421799c7f68ff370ec78c9c36b3f4b4bee362cd052d709901482918ef0cb53fd4c2697e057844a8d052251495ebbcdd337494a9193f1368efb334b75563bab7e67bef3e5fcc9a23cee343600792b45a64d73bf8c1a5542e557d5e24f90c1e19f3c0ee3174feb586e6888e7135dd129354cd1cfbcded03c47a5e23b75a43ea113ff04fcd72772fa3354db7e0ba4020096f815f11c54686da55c76e817e3e04c8ed659fc76d10f4abaf2caf7bc0a4e549f4f958771aaf056ec2c1e922ddee538c4a78d4bdbbe3a3b485123142d01d2cd91c2aa0c546ca143d9a7c919079736a55df887e526c0526f078a9a32e67ec5d9f81dc820338f85780cbb16780fd338aa5e3362190de97c1c5ebdff9a24f4dca270688ddb362b7acc2287376d7e6bc01e27a9e0616789e54b7f24264c791399e930b9f911dd3a86804eed02e944ffcee12aa1f6cd5d34ce2c649aae8fff5b21733754b4848ea5ff3755cc38e91a3c5728ca136b86db1ff6f065bc48b7f748a31c3d4082ac761b3965822fbfe379b8eac9e5b2c2f4c3a832c125dfeced905ad4e5e08d634060c93453079568cd92c7ccb8ff2d726e3e0d28799b6efd2e755473594e6d33e34697bc58a31a561f40ef0efb469eb8ff55948bf4d4f2ff4977fa41c98f6af2912767904fe072c9ff0461655e9af61b0afb661aeb8e74d247d9da3478708d336aeb419f6e7bbaf47942581aedf00f21884a1f46733e99a3029273f9162910356f3835e90ca753ec18808a00397500ff461d25fbd3a4ab74e2405c322e272e9eca2953059ba84733ae891c8456e48c69db522c12b234e897ae687d67e23084aa76251af873ca849511dca73dadb64eee7c7b1e987023ce95fb545987a316013f3bd8b3298704e74ed7a8c29ca06963d86303fb65c66ba58109413485be002efd5487b5dec0bd582b6143cc05534d9e81483d296b71413bcb6847bd0d720572ecff8893500dd070514dbf363612955c514a3332ef2ac02c016a7d12194347186d75de26d1d399b72e74eeb59b54c89367c9b99a62c4a4bcf1d4a40661fb56b0e8375e64d3c048055cea2bb927c24eca89a93cfb8c596146b2b18391adba3c859692333a7632a05d2cd1e077acbdbeb65b112d7371325dca681a1a535892fb1f0d53b3be69d47b6dc47b7a77028f26af13c58b7bc30c26437a1a2c4ef67d74adac9c6ad8a51e6e4b60a682a128c515929eb85fa2375730c91eba06b94aad15432924a7f5eabbf75b3b13671478ae4cf762a6c5befea8ac2a33c7ea41accc5a6274b59d897bb4b46d8ec6081015af5ff6fb5b8856e1425a6be82abc65403ca7022310ee3d61c13d7925e5a59ee5d78671f8c81e7e84b6c919284896625373531809c8666c977259800f7b2267dbfef60a0c311d10e7f6b285a4becec39b7be22bd4c893eded6a590c8a839b70bf6129c91e274586dd6f2e4534d23f9f12753082aed041f8532f74b766f2a0928df459f584ec27be2f4a259fa6a3cb22403b28b1488379bec252a527ca6c7c7fb1f389172a09bacdaaf8494eb59e56aeef731d5a19ff062aea3fc71bbcbc73473be68c9535f7bcb14be3b8124df31a7cb852d64b02d6ee49aedeab1de29f4507f2bfae158a4649a2c98f676b3d7b7099439fddeac18bfaca5aa7f0dfd9bde46f979159c33dc7e2b03caf9c4c1cf74470f246340a6d207680c9abc7f07cc5d2fa12f68a957e9e2f87ad858fd274793e2c41fcd9c6add17b4705889d17f0d00b3203bcd62b7b0dc3cc330317da8951b0a725dc2cf35e94e6fcd1a44fdde7e88bd416e819647411f1fe5e2ea62475d141a8e3c5d316c8a7bb9694aee07f92f30875b1a8d282cde1023022135b7622e305bad5d50cc76a6312f891c80153149459667708ce907b011edc82670f96fb6e73de7b08a3714f896d8d8df2fda639e1577e713d3ea70455fa92844c8679cc404e2002776c2327693233e4ec40e5e32e6ac63a7709325c2f49607b0ca81438fcf29e99eedfbb693d05b37745fd2be7b8f273296a4ff1af4d07bed781ea6afa060bdbec0b3e0660a89f87ceabfafdf29f986c3608d9d2c3ccc2add8f975e6ab837e1ca7283ab3ba25931a42a5e0cbe6db8eb7db8ef43b6d73907af0b1b3d1dfdb12b7ff5d1f4be019973e80e871a5a19161c65785d2284ee6eac73f2c0f3808a44dcb10beeb3c75624f53c09ca8cb091a7027806a36ccdee7253f4c5ec709c828565ce904c0db4a334e9aa37b946bf1444be0b8ccdf18f88874f9ef444ea612e258f5e15a34a3580eef0c46db74991a97df323fa4d2c29894104bfdbb38317878806af3a1c0ed77454e4dc2f803ec6c6dd2db145b6df00f4e27617d098ce688ae51ab02632851b5d5ee0cb220337280b47ca491220509c4230ab0acc093b3ca3e66e1e746c468f1b678f2fd9e9ca7276d4e47c279a074fd1c59eb6a87bd48f00d1c50bf0c53dba9b116718b84175885f08a70dc553dc4fa03c75da9aa101e465775d156b979b6c7673deb21e0918d8ec44aa94958215c12c2c9d3ed1d348d9de502540c8c903f49c567b373061d8cfdda9e60c29b5469dba4e9fcd9506e1c454847b2245a30e39e5a2e2bc7ea76b8dad35b5919bf2f3ce90d00829dbb561dbca2ec71bce5c03eacdf84459d3e21358e9db66fddfbbea8b54a0d4e3bed00e96a5c40c3f712bb9b69532ba5fadd3bcb2581ee3212c6238dcf797670611e6e26d07127a8b12122d8542247b9297f5ca07be215c8b4d0f3a453d4b17073c2b72fe1f492f8ac3494549332b197a2a966cc9421bcd71f26eec8beeb49fc3e831868e8768d51bf2e9cc8dd2f4f3dd8aa6ca1765bd357c7c83eaf0bf211917e34984f55788f235fbb11a60200b73ea2a6d6f8d639cb9e3ba5aa2803cf26156c0c4b8c949aa037b5875e8105b24a987fe81b272d3551385ce55f530c0c7240ade8ecc80f7bf74688fc4e0e8e6ebe2ca1b91b55f8d3ff224018959e562ed41edd7bbb5593ec8b5ab7380a1056804c816a0e61f7af1e6844f68f0d0f2497a6c472ad762ad9dc68c72dc838340a049dceeae3b80904da83c02d2edf99828f927803c1e603f47bded736d3a26ec01d1319ecf589606a1b52e07590391b61c81c36fd77266e83d3d7f722e8744cb342e0f74ce75bd1c6c027d29d7ff72ce9a37eae53dbdbdf45158cb079df13650d0c390bf4426f84d6bb52a2ac2c1fac170490cd476491f54fc707d6baf019f384f9ffc4b2b1a61903d11c204664c5d6ca0cb063ff365aa0363c1bb2e5000e9bdf7bc123b408b373f9e3e162b056fb5b9d5f9db51f3d300c3449851144b0c10805227dfdc4c44171b999ecd39cc6c1491256cc68d6b2d862ad6da556dbb9ce5d069419f5ff6f09491add96d4b2d8951dd320543a9e9e9cfedcb17275d086cf56d48c4a1aca8f3a7404783c2a62823214d8f400771f5900fd524b8da81a5e127df3b0bb5a627979c0d64fd4f79766108b7cc19fb1d542134602578c0fc535cee6fae60eba741fadb40b3a43b5f3e1912996c0901be54cd1c62e06831fe4581a60801448788c8ea6006133479f769d6ce2df847c9b29636840f6fd6403c3cf0473cf5ebeba4da3050dd8648fbba6ae946cc8366a728669e1880e96cac955dab858097ba4530d6602efc2f2143ad9d3c8cc87287800a6cc719ce98734a1914d1ed98bed9d75608cdea66808a04dd9825fccfb16b4fc315d1496e948bd4c8fad6cc449ca956e0facaaae9b780ce0fc86e2d12c2caa85014afb9de4ba154b5b11599acf1db8d322bac5c9332ee9cf5a30dadc6346ccf802b65749effcbec427b191c1829720a2313baff9d1526dcdc0b0fc68acc8cf99d61dcf0dad61a98c30a277670bc8420abf363ac3646a9b839fd244f37da0aa8067eb4987917401717e2c159c2d348f7bff9d56d5a1b1c7b14dc4f29df0138c4c3a73929a7b3f0b7e73190b2d00f39e6891b3c3d35b49ddd993fdea663ceb94bc32731288e1af5cb2a41afa48afa82eb65ae13ba748356867484c07a2fc872af82ee84548044ea38e1aec39d6d9c1346d42165147583b2ae1cdb1fa36dd1bbbe4daf1812d6e6fde5b3df376e4c6fadb66add8761767066904b0548437d1fa2d94a4694ce1ebb72bf1e00a22c14dee4f5e8eb5bef580c51dc6a2576cf7fa6dd2d81052c6fa13b93f2e7f1c39dfffe14491bd432811e3dcd05b8ae9faa4184ffff654099d5c6776a949868e0e02fdc5bdce09df67e9ea43355c64c5bf4a876003e1a85b341775d7df6c0a6e29187fc8ba740fa15f4effcd9e63f3b140ed902dabaed4ff9ba9212e59e20f5f41e64eab6deec5b43368ea5037a2e584a487efa0a473aba4f9c52ae858a30f62e4e44c4aa509dbdf281dc324654f933544900840c413022ca769aecc544dbf63ac87b64400b787d4e8a77c4ced192b87cf195a565c5dd0aa564844bc3eedb0d224c9949cd50888dfff5992fe2b8509d2603e1a306d61d08e6085ae32cfbedf69ac8db3764d3afba7580ed400f104c5a9d7a9eac5eef62bff52a87cb566ae13c130f7e597e23265eef92e02b30719b0dfe835f6b3dd75eed1da115aa1285f09f7ad446eadbd0fa3ffb839d47357a5cf69603b2ea74bbf19057d4ba3008f916dbd608f684034259b6e2568465fa73a9de44a8c5f4cc1bd2a67eb4f4bbe92c5158572c385b0d0dce984f86dfb8ffb1a920bc8edae1d44440c94c1e0ca93dc67445cebb05031aa64a9e5685e30c56bf77553566285f6ca0df52566b991c495e47ba8d171c498bbc3b15902481b757da211b2009d9a43903a2a196f64e787ca613336b5cf0cf8beed11937db2912296d2eb9b3861b42858077c9a68e009eeb0cfa0031a0fe748e7c8430c36a9ba1699180ae60ba815de6e7b2340ef5d5d778e0cf1ff7fb06b1e33300c7d46aae4a696345f0df70e13a07cbd24e61c679ee10f440c27c3af30d11a8b4e65e94217c3a5d9b48d2f7e3e9c426178f0e1a4f0006538b0f12aae297e06d974d7fafe11c0", 0x1000, 0x1000}, {&(0x7f00000025c0)="447861683822858d2656d6c3496ea3de7e015279cf2c1b1a1d", 0x19, 0x1ff}], 0x19, &(0x7f00000026c0)={[{@nodiscard}, {@discard}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x33, 0x64, 0x30, 0x66, 0x30, 0x34, 0x38], 0x2d, [0x66, 0x0, 0x54, 0x61], 0x2d, [0x66, 0x61, 0x34, 0x66], 0x2d, [0xf186ce046d91bd3b, 0x34, 0x37, 0x36], 0x2d, [0x38, 0x31, 0x38, 0x62, 0x35, 0x34, 0x37, 0x39]}}}, {@seclabel}, {@euid_lt={'euid<', r6}}, {@appraise_type}, {@hash}, {@obj_type={'obj_type', 0x3d, '-'}}, {@dont_appraise}]}) r7 = getegid() setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x1}, {0x2, 0x2, 0xee01}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x3, r2}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x1, r4}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, 0xee00}, {0x2, 0x6, r6}], {0x4, 0x4}, [{0x8, 0x3, r7}], {0x10, 0x2}, {0x20, 0x1}}, 0x74, 0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x100007800) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) preadv(r10, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1158.241498][T16452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1158.249528][T16452] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000051f5b744 08:44:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) [ 1158.367989][T16455] loop1: detected capacity change from 0 to 16 [ 1158.386620][T16452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1158.403451][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1158.429195][T16452] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000051f5b744 [ 1158.460408][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:31 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000120001000000000000000a9f1c00000019080001000000"], 0x24}}, 0x0) [ 1158.487232][T16452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1158.492321][T16483] loop3: detected capacity change from 0 to 16 [ 1158.515139][T16452] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x0000000051f5b744 08:44:31 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1158.566834][T16483] NILFS (loop3): couldn't find nilfs on the device [ 1158.621070][T16486] loop3: detected capacity change from 0 to 16 [ 1158.637521][T16486] NILFS (loop3): couldn't find nilfs on the device 08:44:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1158.697955][ T37] audit: type=1804 audit(1629276271.790:1508): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1913/cgroup.controllers" dev="sda1" ino=13986 res=1 errno=0 08:44:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x241, 0x4, &(0x7f0000001300)=[{&(0x7f00000000c0)="6b6c9324afdd9d85ae34db5dffb9823a70cb0200abe443ff", 0x18, 0xffffffffffff8001}, {&(0x7f0000000200)="cfa51e8155d1505ed56a9a6e384577665a7638b8ceecd4bcf00dbd7e598324239b8d4588fafc0fd32d6703fe7f4fc9132059d0191f54d0ed428bb5f6f059c44a420b0529c6baad476f40481f6e2d649574621ad5652b625375006dcae3302212a03b521c6b5fb7f3eadfe713f7cde00801f081a7389bb67588357102f862dd8fb3712a72ffd7bdd2ebbd33e1f04751f936c18c7cb8071fb2ff4fa6bb4bf61cb60a0511a51a082b443ab707659d358fd67bc7c30023f2765726ec46cf45727068652becc5aef28fea9487295b4541fee5b8948b2be9c5f7e98d8024342c6d61bf1fe4c4ee016a8a6fea39b6bec234692b0e556e35468c7ec009273afddf62df81f74ab4c24c4dc80acb27f9a482b30d7df600e2b11815e15112c7fa682bb2a7fcbf9270d88db2ea111d3b3af4f4208370fb632a3770f9a7a9f10d434a285a452b4d0b3a21cd1a71ed965b6fd89448eaf2650b86d6f3839f5a415c4e6b73e4d5cf551eb5c1a1ec7b1a53663b079994fa7aa0662f400f048fd097ee5d4458e185b5d831caf2ed9c1b180cebb23019a964fc866ba16c9106e38907adecb2ab9117fe7369e2508b5b228a33836b7109140b72fbce566bbd4ca68aaed049058c37a4fa1899127d25e126a74467b66e8b165af25ea084004ba4cdde0713c558fcc9419357d31b6e48b4a5d33143943b4de3c7390871dc077606fd2d1177d81f420ccffcaa199d4a0b2b8aa00c44cc0e48324fd223abcbf73d4fa8413f693223ac60437c87af408c3671b72e46b7fcae3b84fda0b4ca2c11dd78d308545c63710d5f8c1794ab41c7bd1f2e8307f0c7c6849825482bf9ef7e21babcd3789f8e5426d79cba98838ddba844e174c4dbca86b0eb4a2f458dd784ad75a86c2811e4958abdb79608e6ef2a3c1fd7bd379aecdc9322f5a50fa84bea47be8a5ea4c2e2a28addf3a7078c9468273f4e53c950cc5adf0f268b618d3e477bedae978aa04d4fa22c26acad4eebc2ca7540906996e340d36c3fa5ea99404b19dc56aeddb56aafd069a60d64881284d70976b89c3bf4b6a04dc37854e450d3756867a523d8fee031699ad23e1a17f60fa14a38e518dc7555d1e24bc46d19c13d8283b08c52131180b99bb5fd10707aeacd3a3cc868c47764ab46fb1113da2a512e5b44ae6aec291c9c431d8578b92d7c68e7bd410a1b26a6768a9b6c03e187543cdf37ab42eea628641a1d92e0bb3ccbe9c487fa72441008345592bb7a35a6f18995f43cbf44f63857e709c1b56664379886c6a76205d8b50d2db3f9321e6024e4c8c8ca7ae51536d94d43b04aca1805b8ab21b9139a76eb75d058b28d6288ebc69a8faf17bb403eb5de7baa164edf34f70802fec6a7e7e39da6c712dd8efac65a45d77ec6da3c22582218d7b58c2de735f4629a8fe6835835652d7905f5a38bbb927e6688ed9f47b74c36e13734db2e98f29a288e4a08f43ddc95a19585d443b52bf9082f1d69adf9cbfae4d7eb3fa26329c71842c19f28daabf9568211bc1fb7ac41508ec1c140a63e9dcf2c8123dff6018c8742a6390ce3d64c8f617f2f347995f834192a5d32767334b40a4decb2dfdceb7c775037d978363ec85ed7f98c742b03f12d95f0714bb0dd42fc066b17a8b7dbab386d7f7a36f89bd4eec743dd0aa0db230ad412384224c25f3bfadb7f5268d0b9924069ae5b21793ca0c8ebd2c28b24c04768c14e873068dc3f690bcccd3b5f6b7a9e6b2c89e52409819bfb54dd633113e25c31a49b33afad0107ca1a9e177c716ba26e5e17fe32c122a0d3ec729398257c3271614bdc6db90e6d1ce3d90f5cce32e3cdaf6d42adc31f7fafc9dd307d3a75ddec341ae989e38c5850498345958fec6ff0d6ed9fb6932422051cf812067d82f19208cfe80f826806e8c59570487d4444620e031e92811f00f78b469b24648622d8a3a6b51466a6578fd07fb17b11118f802f14c138a2cecc8b6f3590693e8f89d0f0742e334e39d9c1c7c6b1f36cb5a4fa9bb747c2f01d26579972ed66469762891cbe547d148d1b43abc4c8e2e63e317b89c2dd91c540c24f185f891313a83969cec879b459f8dd93d597498696045870f5a31aebe311e55b9562c2771eaf70d7c31392a7da6fe5d294dba30b9419bb113fd24e2de2cc612baee267e2f75780d847ac5aaf7c8b3ba58b97934cabbff21de631a38ffb1c9659e37d68bf738a7322838ee9ecc311feb3a7d1e02e44e15dc189dbe1fc6772871eab8e5ac45b6a299249f905776c20520a3b105bac9664064ac86dfc6215770c91a45814d6d16be48b195a3affcab5fa2e8f7ee0c4b3ae8f16167f3c57aaeb7a9a44fc78baaa2f7b3d79fb0fa6108e0e6eee99fda8ab002eb1ab9c6e84b560f5f879730801822e76e5a1d95516ee7140054e9bff75a8edd06f6df20ae3de94bc50bc41bdfdfb119c63f2fdf7929c132d752ef44a058b63df12e20406411231f26908009b3ab42cf5cabca6805de7e97cfd044c3e6daf8c2feb0dbbae6695a2b3c3dd34b7c616682cf3546494ad68dca8e17d16b3207438c02e346825975044770e6717bb5394138140a5179a7fcf652863271edcd33912f69fab68b3f26d5f0d53900a02f310a113015cbd8a8ffe6f3ca1bcc20bcc2ffdd887aa482bc69a0df33f7ccea88028c8d56895a4dbb6708293ef6ab3b4e309b43994f95c08fd1f4965c30cbffc1a3a909bc431ff0920e3023cc41d8a9108a71a20522b19b2a3ca33942a6700a07b2b9d93368094abf0ecbc48bb8eeabb8546c79085e9bf6cd636ef69cc4beac064fccbc673162307718935238dcf6ebdcf0f8b91cb78b3369a60689e9cabbe5d89951434cf871037557becf3b930b9f407f0592790810368717b0e411670f1b3840412154ba96138c3f4b1e55e88a6169d0547e4b6b631f55aee2b2cc040072ac6c9ada18ff7ae1d7f8f2ed84da5b19e5258ec8477e4c0027d91b5c0bdc5e995fb83aae9b9b33d0f8d615332a12f3415970dccb352d4aaea6c5b5f9aeb8424a50223b0d6203405f8a852d5b37fd6101b54401be5bc993933d7d307dc766dd372286d7dd6bc23e248cb0e1dfd0c95eced41fc9751259f12fc70926a21e752784eec73d0ac694b31901ec31d3dcf3bc2ad36df32e75ba47df7c167f94ded13a2c18df02b52aae023bf378c311df94a2cae73138ce2dcf2537ab15d04d0688a482867fe8ac90bc6875946296fd78d35a967098ac4c6e06bf694edb571e46c2c38bb7736673ec86ad71a57e3bc148fb170675b72d581833db4451757b101a2a045a312aea1aad6b3aec3926e1ba05bb48b0db52aa8c08493fef030b08298e04e40ec527f4db6411e651dea670eb3c40a03564587b295f77562a4a430151610d6e6fa2bff3abf07b6695852490341180137441a3ae4df0b89599c49edcae41b979264af68c15c8ad334b9033cfb6a03944aa7ac3a641c8125d6d5b62b1c708e1798e0fee21098aee22aa2fadfcf0bdeaa5e457eea4c5856b277f72b2cb65cba9de342d5feb49a7dff80336743fbe8b8a0c785cb4129bf4c06e821de81f2f42ab94747e804af5013dcfb745db399c8eef21b51cf821eddf424782a2479bd993e8ed52493a71dfb477517e781a9fe2c7256e8bd013ec7ed2888d7ae51464c88607972d56427384898a64425ce4d7b3ed1115d15b39e3f6c238ae94824fb0db74c1a1215a3ca5f784894cb546b1ca33bc89a4248ddaba6de384587d698f9a82423b6bd885b579cfd3e59ae25985515739eb6ed830072e4f07638acc4477d76c381202cfe0ec8dc73d7b9a6d82c77c51789cd35e4bc9bed39404ad5b14ab8fdb82fed29452a56241ecfbf3464370a5dbd9fc22d2feecb95626d59cc97fd5a7aba8f024f60682fc16c8c5baa204a00df3633cbb83882f1e47034b63357066e2072568c13eff34818e6e22e4fb430fc7eff8a16a788447f56d4f026d86c07c8d4801b664008c4a02e882825b597ee42b78dd4003b0b03c58f789fc46cd84f7af7eb40141876ae2c9171ce4c480f3b826446d38c28e5e8f009143beb20f582d31de3c9193ac5133e674a33aae4307293d29becf5811c9f67913fe43f29b80adc0010680055ba7f45ea6e490f60deba540d37d6941e19fb30d91f3bf39ec57d4957b814e45aff32a11dbaa424fc3e32621ed1780c2ee229b6896006d6a9d689ae0fa666cab988630a522e57a668c018586bc2c233436eccddeb1b933163d9944c206d9486bd582f288a9c19d6b11fe1019b92bcc747699a4d0fcdf5e5f8f30d15e4facdc52f68a0444d6f44686f369402d92307a033bf2a57659a0bb90306e04c6d0c1722f7a56b541804b71bc8d34bd6d3b22b79acbff310f8853aa01de0c3a49f722bb843110ab8600c7820f8d41c4a63b08c079ae3b8d8ecdd78b76d26902d778eff1ad310e997401df0375f7ea91b9b0bd5e46a0a47321b5c6facd509a92f2d1129c21915c3bd62d8b5fc26aa620809726751be57f8463213f721beb12506dd6db148698240337871c680186d13f88828c972fa0d9e710e41458e6c203a40196aeb8b21d1ad882fd1f5d12a15f22dead741a81397340ae88b73df7d01b9c07d8f7980bc9fc669da2a744257fc2faac0bf248109bdcb131800d5c69af89c57c51db3e9c6553277c1e6869bbe246bd32d6ec703aaeb038d7e8dba1a1abaef91ba091030e55d154e76355a401d3a103d0a0dcf4451e57100b7865d83b2c52dc59163b47ad915eeb57d84e1e5c068e1a3dbd33de4f1c602ee2994c2ac77fe433cbcb93c9ff78e2bd0becf0bc76b9d230f2d01a5a6a318903f6c3143c9a366467e9cb67216ed2faa76ba44812543c34c60bd021265cd1ddb5235029d21d575245af449877fc76c8489b7005f3f30f9338a4db0fad92e52734a48b45de6759a4030db514204370d4b06bc41eb2abedeb40cdb06606da8c1393ec814111e8a34f1f23e52d7976292dc1e78329bd3bd3755c7f854249799b7cf9f89161d1308d4458762d4a47e813b5ee9cebd25d205cd5bba293e29e1cbef0bbbd7c7bc307247d37a799339818c0df656bcd63322da32135b537d3c549fb23a01690967be1ab18630ab9e938c9d810dfb9dd15c0fa293c7c9584e2bfbe47462fd82736ad9d9cd7dc69da8986c4c920b4f5d6dfd32e30c001c60c459705f21e5906bca880fcd4bea901c44249d4c0e6ca943234c0b9cee3d1a30c7301ed5e140a2fbf5e49e050768ecd2e8bb5576d7d63b5fae2295f6f1c0870a815122637f4470662fb7cd66c027ab194ccbceea17e9b46739ebbc641fb6dc3cb136ad0e7f3f66622ceec133670ee11d05c87a826b7e9b177d1037c8ec3dfb65a5a496ee5bd80f326f535984e33e3335aa9d8d1adaeb48114f9635811bcccdaf2c479e8b1fad6c2a144b91f23f0d742514c94ab378783b8dcd99e7456475bd52bb3b4c18c018dfe12fb5b02394f391ebccfdf9f3661b152bde4cbeba4a5b47f0cf1f9c49699426fc7397f6083feb8ce60c37f15117ec23e4090f28fe44a0aa3564ac4258502089dd178717edd29dbb2570f43fcd756f5bc6c50aa64add89f49deb897682bd0f232fa1a7fed1cab4ce7de5420a34c496be27dcdba406e7aa44bf0fcdac1c79c5ffd0225a9a94392e7c40472148b08e50024072f7236b89cf54acbff36fe67b5756e5aa038e23aa9d5392afc724dcb8f5faaae35132857fc8cce42f6a96975ebeb49eb49fe5aded473244ed256b0272e4900f92af8452b86d8be32f83cbe08d2434fc6e350cd0c14ca81ff2317eacd6256aae163e0a70a74b", 0x1000, 0x5}, {&(0x7f0000001200)="b7414f9eeb241b3757b3102a529edef5df90117c0273e8795cece60f6496b0c205a42c48f2549200d1be1b954da0d8a85363e421459cc363fa14cb0fed02e15cd2c3eba1398170d2bf1a3d6ee638504ea6dc60113a624a012ef03862c594f20876d9652d842558d10e3492307726f790b9adf48bb04a9298930d1ca8e1277e96c2183191b6b47284ad48ec577c193e27c9236dcd553da695558e419ab7806a961fbcccc982c46f551aec99d05c3f7d52249b7931b59f7d60c4ce1bc3ce9d051d5af0ef8f825739ee6b9ab49f85e16e6d991d62c14a95d76d7452b3960f88eb46e34bc0c75f1544796386d7af", 0xec, 0x3000}, {&(0x7f0000000100)="9a2b879d8859559f3ffdec3d87969cd871727f8869ee44ff05dd8a88cfbf5fd6b4115932bd59b4c040fa", 0x2a, 0x2b}], 0x40010, &(0x7f0000001500)=ANY=[@ANYBLOB="72657363616e5f757569645f747265652c6d657461646174615f726174696f3d307830303030303030303030303030303039286e6f61636c2c6f626a5f757365723d7b3a2c736d61636b6673726f6f743d245e2c91213a7d26402c726f6f74636f6e746578743d757365725f752c736d61636b66736465663d5e2c66736d613030303030382c657569823c0000000000000000000000000000000033893ee4322baa814ca15a346d693fbc5bdecf05eab599d4dfbf173c4923bdb7ebcb9e14ce1046ca1ee4e93b20273671774e45c9db303720797cf7f3e6e86be8ce5ef13a4b6d9958da97639c3e26835e4583a1588b77aa7f20c2b2de4714a3b0e9283fc4b190c01a4f7d0c95d0078529cf4f34bc07ed731de1dfafe5f0c394b63a24df26ba53a4ab06668e329ae7fe7caaa4b63d9aa03b281899", @ANYRESDEC=0x0, @ANYBLOB=',hash,obj_user=-,smackfsroot=!)(!-(#&\',audit,\x00']) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000140)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="05007c00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) [ 1158.774651][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.804472][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:32 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000f01c00000019080001000000"], 0x24}}, 0x0) 08:44:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x9000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1158.919318][T16514] loop1: detected capacity change from 0 to 16256 08:44:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1159.042772][T16511] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1159.050994][T16511] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f0916f7c [ 1159.061210][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1159.123417][T16511] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1159.139859][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:32 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000021c00000019080001000000"], 0x24}}, 0x0) [ 1159.168830][T16511] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x00000000f0916f7c 08:44:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xa000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1159.214469][ T37] audit: type=1804 audit(1629276272.310:1509): pid=16486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1913/cgroup.controllers" dev="sda1" ino=13986 res=1 errno=0 [ 1159.255469][T16486] loop3: detected capacity change from 0 to 16 [ 1159.302418][T16486] NILFS (loop3): couldn't find nilfs on the device [ 1159.384269][T16483] loop3: detected capacity change from 0 to 16 [ 1159.403296][ T37] audit: type=1804 audit(1629276272.500:1510): pid=16535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1913/cgroup.controllers" dev="sda1" ino=13986 res=1 errno=0 [ 1159.443980][T16514] loop1: detected capacity change from 0 to 16256 [ 1159.497808][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1159.522094][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:44:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, r0, 0xfc02f000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100007800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x23, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfa}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044045}, 0x4801) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) 08:44:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xb000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:32 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000031c00000019080001000000"], 0x24}}, 0x0) 08:44:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fchmod(r1, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0xd, &(0x7f0000000000)={r5}, 0x8) 08:44:32 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000041c00000019080001000000"], 0x24}}, 0x0) 08:44:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xc000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x24, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1159.794348][T16559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1159.815137][T16559] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008c5ee0b1 [ 1159.848425][T16559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1159.889101][T16559] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008c5ee0b1 08:44:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f29df73728c18ded"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0x24}, {0x18, 0x1}, {0x1b, 0x1}, {0x16, 0x1}, {0xb, 0x1}, {0x16}, {0xb}, {0x24}, {0x6c, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0x6c}, {0x24}, {0x36}, {0x6c, 0x1}, {0x6c}, {0xc}, {0x16}, {0x1}, {0x3, 0x1}, {0x2}, {0x6c}, {0x6, 0x1}, {0x9, 0x1}, {0x1b}, {0x3}, {0x4, 0x1}, {0x24, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3ed}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x60, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x9, 0x1}, {0x6, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0x60}, {0x22, 0x1}, {0x18}, {0x18}, {0x6}, {0x12, 0x1}, {0x3}, {0x48}, {0x6c}, {0x9, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000fb601c0000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="44002c80"], 0x60}}, 0x0) [ 1159.980460][T16559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:33 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000051c00000019080001000000"], 0x24}}, 0x0) [ 1160.005714][ T37] audit: type=1804 audit(1629276273.100:1511): pid=16572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1914/cgroup.controllers" dev="sda1" ino=13883 res=1 errno=0 [ 1160.036373][T16559] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008c5ee0b1 08:44:33 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xe000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1160.114426][T16559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1160.145099][ T37] audit: type=1804 audit(1629276273.210:1512): pid=16577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir402713781/syzkaller.6yj0iW/1914/cgroup.controllers" dev="sda1" ino=13883 res=1 errno=0 [ 1160.175335][T16559] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc15 ref_ctr_offset: 0x4 of mm: 0x000000008c5ee0b1 08:44:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100007800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) 08:44:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0, 0x181) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:33 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000061c00000019080001000000"], 0x24}}, 0x0) 08:44:33 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0xf000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 08:44:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/85, 0x55}], 0x1, 0x100d9f, 0x200) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc17}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0xd, &(0x7f0000000000)={r4}, 0x8) 08:44:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:33 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000071c00000019080001000000"], 0x24}}, 0x0) 08:44:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x60}}, 0x0) [ 1160.644554][T16626] net_ratelimit: 15 callbacks suppressed [ 1160.644572][T16626] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0xff, 0x12) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e31"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100007800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1800003, 0x80010, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) [ 1160.724652][T16624] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 08:44:33 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000081c00000019080001000000"], 0x24}}, 0x0) 08:44:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:33 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x10000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1160.776767][T16624] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000c5a2762d [ 1160.876400][T16624] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1160.901094][T16624] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000c5a2762d 08:44:34 executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200010000000000000000091c00000019080001000000"], 0x24}}, 0x0) [ 1160.962226][T16645] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1161.043237][T16650] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 08:44:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x21c, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x1, 0x1, 0x0, {0xfffffffffffffffb, 0x1f5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0xffff7fff, 0x80}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x170003, {0x1000, 0x6, 0x5, 0x5}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x5, 0x0, {0x10000, 0x5f, 0x0, 0xcd, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x1f, 0x2}}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0x6, 0xfac09, 0xfac05, 0xfac0b]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "004b3674fc83f7aa429e68b1bb03d986259f03433dbb397dd89d3db4b52fcf92e274f5ffd6c80a8114e22a5dc0b6f785ac6e9117f381156b20405f79de7c68be8f4a63bbbf6a3ce0b4c53d1b9338c80ab8fa73160db872b20cf6726f6b1be399a0e933b2d6d025b62fc643ed87542f92a743ce811c3c15de621a7cf1e00a8f27"}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44}]}, 0x60}}, 0x0) r5 = dup2(r0, r0) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xac, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000841}, 0x50) 08:44:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x11000000, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1162.021516][T16669] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1162.308076][T12957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.377985][T16683] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1162.421748][ T8471] syz-executor.1 (8471) used greatest stack depth: 22344 bytes left [ 1162.739306][T12957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.120364][T12957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.724162][T12957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.904109][T12957] bridge0: port 3(ip6gretap0) entered disabled state [ 1164.935713][T12957] device ip6gretap0 left promiscuous mode [ 1164.945740][T12957] bridge0: port 3(ip6gretap0) entered disabled state [ 1166.582816][T12957] device hsr_slave_0 left promiscuous mode [ 1166.589493][T12957] device hsr_slave_1 left promiscuous mode [ 1166.597812][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.605626][T12957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.616812][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.624901][T12957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.634937][T12957] device bridge_slave_1 left promiscuous mode [ 1166.641743][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.649821][T12957] device bridge_slave_0 left promiscuous mode [ 1166.659975][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.673272][T12957] device veth1_macvtap left promiscuous mode [ 1166.679314][T12957] device veth0_macvtap left promiscuous mode [ 1166.685559][T12957] device veth1_vlan left promiscuous mode [ 1166.691553][T12957] device veth0_vlan left promiscuous mode [ 1171.284303][T12957] team0 (unregistering): Port device team_slave_1 removed [ 1171.299080][T12957] team0 (unregistering): Port device team_slave_0 removed [ 1171.315630][T12957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.329441][T12957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.392960][T12957] bond0 (unregistering): Released all slaves [ 1171.618671][T16730] chnl_net:caif_netlink_parms(): no params data found [ 1171.704870][T16730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.712275][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.721768][T16730] device bridge_slave_0 entered promiscuous mode [ 1171.732204][T16730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.739382][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.749120][T16730] device bridge_slave_1 entered promiscuous mode [ 1171.776212][T16730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.787888][T16730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.816525][T16730] team0: Port device team_slave_0 added [ 1171.824682][T16730] team0: Port device team_slave_1 added [ 1171.842977][T16730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.850616][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.879902][T16730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.893922][T16730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.901113][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.927193][T16730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.974930][T16730] device hsr_slave_0 entered promiscuous mode [ 1171.983448][T16730] device hsr_slave_1 entered promiscuous mode [ 1171.990787][T16730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1171.998356][T16730] Cannot create hsr debugfs directory [ 1172.117156][T16730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.124294][T16730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.131751][T16730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.138822][T16730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.208479][T16730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.228394][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1172.238608][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.247020][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.276130][T16730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.291572][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1172.300231][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.307299][T16713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.330635][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1172.339079][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.346318][T16713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.376001][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1172.386049][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1172.409077][T16730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1172.423797][T16730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1172.437759][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1172.447919][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1172.458027][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1172.481223][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1172.499633][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.507204][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1172.521906][T16730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.638345][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1172.649203][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1172.678420][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1172.688010][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1172.701570][T16730] device veth0_vlan entered promiscuous mode [ 1172.713151][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1172.722924][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1172.742483][T16730] device veth1_vlan entered promiscuous mode [ 1172.776501][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1172.786375][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1172.795791][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1172.805810][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1172.818915][T16730] device veth0_macvtap entered promiscuous mode [ 1172.834531][T16730] device veth1_macvtap entered promiscuous mode [ 1172.860511][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1172.871122][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.881730][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1172.892927][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.903381][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1172.914448][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.924760][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1172.935754][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.947797][T16730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.957470][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1172.967555][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1172.976227][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1172.987494][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1173.023576][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1173.056942][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.086943][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1173.109488][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.129378][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1173.146381][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.165996][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1173.178203][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.197618][T16730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.208488][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1173.228128][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1173.404335][ T927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.430568][ T927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.504206][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1173.523606][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.544781][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.582178][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1173.699795][T17006] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1173.715972][T17006] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x0000000099fccb75 [ 1173.764289][T17006] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1173.781604][T17006] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x0000000099fccb75 [ 1176.667124][T12957] device hsr_slave_0 left promiscuous mode [ 1176.675738][T12957] device hsr_slave_1 left promiscuous mode [ 1176.683073][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.690958][T12957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.701057][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.708471][T12957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.717620][T12957] device bridge_slave_1 left promiscuous mode [ 1176.724328][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.736605][T12957] device bridge_slave_0 left promiscuous mode [ 1176.743219][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.754604][T12957] device veth1_macvtap left promiscuous mode [ 1176.762272][T12957] device veth0_macvtap left promiscuous mode [ 1176.768332][T12957] device veth1_vlan left promiscuous mode [ 1176.774308][T12957] device veth0_vlan left promiscuous mode [ 1176.910999][ T3253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.558619][ T8867] Bluetooth: hci1: command 0x0409 tx timeout [ 1181.002707][T12957] team0 (unregistering): Port device team_slave_1 removed [ 1181.018211][T12957] team0 (unregistering): Port device team_slave_0 removed [ 1181.037556][T12957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.055308][T12957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.118404][T12957] bond0 (unregistering): Released all slaves [ 1181.313991][T17017] chnl_net:caif_netlink_parms(): no params data found [ 1181.402974][T17017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.410573][T17017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.421417][T17017] device bridge_slave_0 entered promiscuous mode [ 1181.431629][T17017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.438947][T17017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.446767][T17017] device bridge_slave_1 entered promiscuous mode [ 1181.476840][T17017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.489852][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.517411][T17017] team0: Port device team_slave_0 added [ 1181.536903][T17017] team0: Port device team_slave_1 added [ 1181.587081][T17017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.594128][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.628443][ T9610] Bluetooth: hci1: command 0x041b tx timeout [ 1181.633458][T17017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.652920][T17017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.667356][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.703044][T17017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.760695][T17017] device hsr_slave_0 entered promiscuous mode [ 1181.768833][T17017] device hsr_slave_1 entered promiscuous mode [ 1181.775506][T17017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.783939][T17017] Cannot create hsr debugfs directory [ 1181.973552][T17017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.980682][T17017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.988091][T17017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.995267][T17017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.111610][T17017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.130371][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1182.140550][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.157134][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.175595][T17017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.209961][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1182.220186][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1182.228731][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.235796][T16713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.250426][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1182.268033][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1182.287041][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.294180][ T9610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.320225][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1182.358468][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1182.367347][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1182.389203][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1182.420739][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1182.437010][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1182.446228][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1182.463202][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1182.475789][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1182.492319][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1182.504940][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1182.520898][T17017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1182.579262][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.588386][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.604618][T17017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.810783][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.820856][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.862634][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1182.872329][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1182.885445][T17017] device veth0_vlan entered promiscuous mode [ 1182.894667][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1182.904706][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1182.921536][T17017] device veth1_vlan entered promiscuous mode [ 1182.957047][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1182.966290][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1182.976773][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1182.986605][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1183.000240][T17017] device veth0_macvtap entered promiscuous mode [ 1183.016728][T17017] device veth1_macvtap entered promiscuous mode [ 1183.053372][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1183.064677][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.075394][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1183.086302][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.096902][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1183.107542][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.117479][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1183.128592][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.140382][T17017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.158495][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1183.166874][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1183.184548][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1183.197661][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1183.215965][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1183.226845][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.237429][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1183.250237][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.260641][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1183.271312][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.281487][T17017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1183.292045][T17017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.303799][T17017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.314706][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1183.324060][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1183.427773][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.458920][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.488733][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.496928][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.500797][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1183.544184][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1183.653501][T17256] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1183.666190][T17256] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000fc6c576d [ 1183.709453][ T9591] Bluetooth: hci1: command 0x040f tx timeout [ 1183.718295][T17256] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1183.726317][T17256] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000fc6c576d [ 1186.281567][ T154] device hsr_slave_0 left promiscuous mode [ 1186.292540][ T154] device hsr_slave_1 left promiscuous mode [ 1186.308989][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.316495][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.327269][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.336274][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.345398][ T154] device bridge_slave_1 left promiscuous mode [ 1186.352649][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.362349][ T154] device bridge_slave_0 left promiscuous mode [ 1186.369812][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.383540][ T154] device veth1_macvtap left promiscuous mode [ 1186.389768][ T154] device veth0_macvtap left promiscuous mode [ 1186.396839][ T154] device veth1_vlan left promiscuous mode [ 1186.403475][ T154] device veth0_vlan left promiscuous mode [ 1189.467499][T12074] Bluetooth: hci1: command 0x0409 tx timeout [ 1190.632842][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1190.645050][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1190.657927][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.675823][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.739509][ T154] bond0 (unregistering): Released all slaves [ 1190.921130][T17281] chnl_net:caif_netlink_parms(): no params data found [ 1190.994142][T17281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.002607][T17281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.012794][T17281] device bridge_slave_0 entered promiscuous mode [ 1191.023961][T17281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.032031][T17281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.042702][T17281] device bridge_slave_1 entered promiscuous mode [ 1191.075040][T17281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.089019][T17281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.116415][T17281] team0: Port device team_slave_0 added [ 1191.125830][T17281] team0: Port device team_slave_1 added [ 1191.159328][T17281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.166294][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.193256][T17281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.225774][T17281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.235681][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.269733][T17281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.328266][T17281] device hsr_slave_0 entered promiscuous mode [ 1191.336416][T17281] device hsr_slave_1 entered promiscuous mode [ 1191.351714][T17281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.363510][T17281] Cannot create hsr debugfs directory [ 1191.547260][ T9591] Bluetooth: hci1: command 0x041b tx timeout [ 1191.575449][T17281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.582578][T17281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.590045][T17281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.597180][T17281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.685433][T17281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.714618][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1191.724163][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.734165][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.752233][T17281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.767260][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1191.775727][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.782839][T16667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.811021][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1191.820612][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.827807][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.848341][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1191.861139][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1191.869928][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1191.879902][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1191.898181][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1191.906188][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1191.916950][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1191.926586][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1191.936230][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1191.949431][T17281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1191.981797][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.990563][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1192.010565][T17281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.128866][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1192.146711][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1192.180851][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1192.198665][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1192.210814][T17281] device veth0_vlan entered promiscuous mode [ 1192.247284][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1192.255103][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1192.270092][T17281] device veth1_vlan entered promiscuous mode [ 1192.326609][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1192.344345][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1192.358250][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1192.366926][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1192.387517][T17281] device veth0_macvtap entered promiscuous mode [ 1192.403592][T17281] device veth1_macvtap entered promiscuous mode [ 1192.438717][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1192.449324][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.460421][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1192.471841][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.482478][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1192.493834][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.503993][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1192.514855][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.527831][T17281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.541803][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1192.552374][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.563125][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1192.588069][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.607015][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1192.626981][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.636831][T17281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1192.676986][T17281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.693968][T17281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.704843][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1192.715628][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1192.725188][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1192.734431][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1192.743870][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1192.753702][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1192.911130][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.938763][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.991816][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1193.039041][T12957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.059316][T12957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.076748][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1193.185060][T17512] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1193.214531][T17512] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x0000000026c18423 [ 1193.243671][T17512] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1193.284728][T17512] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x0000000026c18423 [ 1195.928512][ T10] device hsr_slave_0 left promiscuous mode [ 1195.935226][ T10] device hsr_slave_1 left promiscuous mode [ 1195.947850][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.955284][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.966066][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.974412][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.983585][ T10] device bridge_slave_1 left promiscuous mode [ 1195.990113][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.999195][ T10] device bridge_slave_0 left promiscuous mode [ 1196.005367][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.017632][ T10] device veth1_macvtap left promiscuous mode [ 1196.024415][ T10] device veth0_macvtap left promiscuous mode [ 1196.031801][ T10] device veth1_vlan left promiscuous mode [ 1196.041604][ T10] device veth0_vlan left promiscuous mode [ 1198.986557][ T9610] Bluetooth: hci1: command 0x0409 tx timeout [ 1200.254093][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1200.279107][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1200.293640][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.309740][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.373269][ T10] bond0 (unregistering): Released all slaves [ 1200.590891][T17530] chnl_net:caif_netlink_parms(): no params data found [ 1200.668819][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.676069][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.684642][T17530] device bridge_slave_0 entered promiscuous mode [ 1200.694268][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.701986][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.710324][T17530] device bridge_slave_1 entered promiscuous mode [ 1200.731320][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.759932][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.791558][T17530] team0: Port device team_slave_0 added [ 1200.802044][T17530] team0: Port device team_slave_1 added [ 1200.824822][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.832785][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.860552][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.875400][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.883676][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.911407][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.959216][T17530] device hsr_slave_0 entered promiscuous mode [ 1200.968162][T17530] device hsr_slave_1 entered promiscuous mode [ 1200.974906][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1200.992421][T17530] Cannot create hsr debugfs directory [ 1201.066506][T28410] Bluetooth: hci1: command 0x041b tx timeout [ 1201.130598][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.137727][T17530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.145093][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.152230][T17530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.224496][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.243222][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.252765][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.261280][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.284868][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.300197][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1201.308829][ T9610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.315889][ T9610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.338136][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1201.347877][T28410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.354942][T28410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.378644][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1201.403550][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1201.412332][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1201.422078][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1201.438075][T17530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1201.450582][T17530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1201.461493][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1201.491233][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1201.499846][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1201.520369][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.653395][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1201.663367][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1201.690594][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1201.700377][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1201.713934][T17530] device veth0_vlan entered promiscuous mode [ 1201.723847][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.735184][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.763261][T17530] device veth1_vlan entered promiscuous mode [ 1201.800074][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1201.811149][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1201.819392][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1201.828812][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1201.840833][T17530] device veth0_macvtap entered promiscuous mode [ 1201.854054][T17530] device veth1_macvtap entered promiscuous mode [ 1201.879904][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.891091][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.909490][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.924619][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.942632][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.965956][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.975797][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.998022][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.016403][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.028208][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1202.037614][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1202.045723][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1202.055083][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1202.069036][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1202.117735][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.145985][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1202.170326][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.182875][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1202.202223][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.214792][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1202.226941][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.238812][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.249482][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1202.260902][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1202.439568][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.466797][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.536214][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1202.577849][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.605975][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.627768][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1202.780641][T17766] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1202.796854][T17766] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000074e8484 [ 1202.809862][T17766] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1202.819991][T17766] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000074e8484 [ 1205.514196][ T10] device hsr_slave_0 left promiscuous mode [ 1205.522731][ T10] device hsr_slave_1 left promiscuous mode [ 1205.530218][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.539897][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.550273][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.558445][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.568350][ T10] device bridge_slave_1 left promiscuous mode [ 1205.574565][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.584245][ T10] device bridge_slave_0 left promiscuous mode [ 1205.591290][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.605224][ T10] device veth1_macvtap left promiscuous mode [ 1205.612876][ T10] device veth0_macvtap left promiscuous mode [ 1205.619497][ T10] device veth1_vlan left promiscuous mode [ 1205.625317][ T10] device veth0_vlan left promiscuous mode [ 1208.505296][ T9591] Bluetooth: hci1: command 0x0409 tx timeout [ 1209.865903][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1209.881720][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1209.893588][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.912169][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.980673][ T10] bond0 (unregistering): Released all slaves [ 1210.183613][T17786] chnl_net:caif_netlink_parms(): no params data found [ 1210.241627][T17786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.248976][T17786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.257664][T17786] device bridge_slave_0 entered promiscuous mode [ 1210.267652][T17786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.274801][T17786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.283460][T17786] device bridge_slave_1 entered promiscuous mode [ 1210.310007][T17786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.323388][T17786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.354320][T17786] team0: Port device team_slave_0 added [ 1210.362459][T17786] team0: Port device team_slave_1 added [ 1210.381694][T17786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.388847][T17786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.418202][T17786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.432745][T17786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.440435][T17786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.467418][T17786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.513991][T17786] device hsr_slave_0 entered promiscuous mode [ 1210.522106][T17786] device hsr_slave_1 entered promiscuous mode [ 1210.532325][T17786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1210.540942][T17786] Cannot create hsr debugfs directory [ 1210.584977][T16713] Bluetooth: hci1: command 0x041b tx timeout [ 1210.664279][T17786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.671408][T17786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.678836][T17786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.685928][T17786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.790847][T17786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.811982][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1210.822536][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.833044][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.851280][T17786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.865838][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1210.874319][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.881453][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.918881][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1210.928829][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.935981][ T9610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.959038][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1210.969191][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1210.990983][T17786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1211.002668][T17786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.016989][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1211.027340][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1211.036064][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1211.058105][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1211.075792][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1211.083321][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1211.096757][T17786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.225169][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1211.233945][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1211.285997][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1211.294342][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1211.308978][T17786] device veth0_vlan entered promiscuous mode [ 1211.317796][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1211.327387][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1211.343372][T17786] device veth1_vlan entered promiscuous mode [ 1211.378471][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1211.388447][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1211.398261][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1211.407756][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1211.420540][T17786] device veth0_macvtap entered promiscuous mode [ 1211.439237][T17786] device veth1_macvtap entered promiscuous mode [ 1211.461540][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1211.475240][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.486535][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1211.497907][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.514829][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1211.554775][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.564622][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1211.626909][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.668253][T17786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.687484][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1211.700988][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1211.712432][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1211.722002][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1211.734644][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1211.748292][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.759215][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1211.770553][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.782905][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1211.796439][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.807205][T17786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1211.818320][T17786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.830460][T17786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.840847][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1211.851426][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1212.000284][T28271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.037020][T28271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.062129][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1212.140810][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.161146][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.187672][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1212.339441][T18023] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1212.360153][T18023] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000006f296359 [ 1212.387320][T18023] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1212.409724][T18023] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000006f296359 [ 1215.148658][ T10] device hsr_slave_0 left promiscuous mode [ 1215.168141][ T10] device hsr_slave_1 left promiscuous mode [ 1215.176759][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.184241][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.196199][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.203628][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.212940][ T10] device bridge_slave_1 left promiscuous mode [ 1215.219663][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.229029][ T10] device bridge_slave_0 left promiscuous mode [ 1215.236153][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.249776][ T10] device veth1_macvtap left promiscuous mode [ 1215.255914][ T10] device veth0_macvtap left promiscuous mode [ 1215.261952][ T10] device veth1_vlan left promiscuous mode [ 1215.268345][ T10] device veth0_vlan left promiscuous mode [ 1218.184116][T16667] Bluetooth: hci1: command 0x0409 tx timeout [ 1219.491886][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1219.509410][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1219.521448][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.536696][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.596751][ T10] bond0 (unregistering): Released all slaves [ 1219.767488][T18042] chnl_net:caif_netlink_parms(): no params data found [ 1219.866543][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.875190][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.882955][T18042] device bridge_slave_0 entered promiscuous mode [ 1219.895350][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.902517][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.918035][T18042] device bridge_slave_1 entered promiscuous mode [ 1219.940538][T18042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.955696][T18042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.988169][T18042] team0: Port device team_slave_0 added [ 1219.997329][T18042] team0: Port device team_slave_1 added [ 1220.016647][T18042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.023890][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.050217][T18042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.073573][T18042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.080621][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.113206][T18042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.179441][T18042] device hsr_slave_0 entered promiscuous mode [ 1220.197181][T18042] device hsr_slave_1 entered promiscuous mode [ 1220.208404][T18042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.219382][T18042] Cannot create hsr debugfs directory [ 1220.271579][T25803] Bluetooth: hci1: command 0x041b tx timeout [ 1220.423152][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.430294][T18042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.437740][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.444907][T18042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.548764][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.568646][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1220.578314][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.586705][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.603364][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.618382][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1220.628005][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.635144][T16713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.655826][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1220.665711][T25803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.672775][T25803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.694762][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1220.703611][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1220.714606][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1220.744434][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1220.752480][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1220.771162][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1220.781296][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1220.798269][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1220.810831][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1220.823594][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1220.843984][T18042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1220.891019][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1220.914089][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1220.929984][T18042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.060235][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1221.076523][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1221.102244][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1221.111776][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1221.125024][T18042] device veth0_vlan entered promiscuous mode [ 1221.134402][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1221.142226][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1221.157328][T18042] device veth1_vlan entered promiscuous mode [ 1221.191303][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1221.200758][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1221.210445][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1221.219883][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1221.233175][T18042] device veth0_macvtap entered promiscuous mode [ 1221.249450][T18042] device veth1_macvtap entered promiscuous mode [ 1221.275174][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1221.285920][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.313701][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1221.333659][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.343511][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1221.366448][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.377195][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1221.389335][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.401050][T18042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.410977][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1221.422735][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1221.432893][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1221.442605][T16713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1221.455973][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1221.469848][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.480981][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1221.492443][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.502788][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1221.513703][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.523518][T18042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1221.534225][T18042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.545861][T18042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.560143][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1221.569111][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1221.685587][T28271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.725128][T28271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.775561][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1221.813809][T12957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.822110][T12957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.850389][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1221.961421][T18278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1221.974211][T18278] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000725f5eca [ 1222.000940][T18278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1222.010749][T18278] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000725f5eca [ 1224.732615][ T10] device hsr_slave_0 left promiscuous mode [ 1224.739491][ T10] device hsr_slave_1 left promiscuous mode [ 1224.746913][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.755311][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.767510][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.775259][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.784473][ T10] device bridge_slave_1 left promiscuous mode [ 1224.791531][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.800411][ T10] device bridge_slave_0 left promiscuous mode [ 1224.807377][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.818739][ T10] device veth1_macvtap left promiscuous mode [ 1224.825378][ T10] device veth0_macvtap left promiscuous mode [ 1224.831478][ T10] device veth1_vlan left promiscuous mode [ 1224.837613][ T10] device veth0_vlan left promiscuous mode [ 1227.626490][ T9591] Bluetooth: hci1: command 0x0409 tx timeout [ 1229.056388][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1229.070450][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1229.088305][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.101847][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.166862][ T10] bond0 (unregistering): Released all slaves [ 1229.358950][T18292] chnl_net:caif_netlink_parms(): no params data found [ 1229.419519][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.427301][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.437077][T18292] device bridge_slave_0 entered promiscuous mode [ 1229.448135][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.455904][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.466505][T18292] device bridge_slave_1 entered promiscuous mode [ 1229.491015][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.502499][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.531783][T18292] team0: Port device team_slave_0 added [ 1229.540626][T18292] team0: Port device team_slave_1 added [ 1229.565272][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.572251][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.598572][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.620943][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.630876][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.669818][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.702903][T16667] Bluetooth: hci1: command 0x041b tx timeout [ 1229.732960][T18292] device hsr_slave_0 entered promiscuous mode [ 1229.741011][T18292] device hsr_slave_1 entered promiscuous mode [ 1229.748969][T18292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.757367][T18292] Cannot create hsr debugfs directory [ 1229.899836][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.907008][T18292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.914441][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.921502][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.994247][T18292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.013568][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1230.023678][T25803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.031484][T25803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.057809][T18292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.072924][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1230.081343][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.088883][T16667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.115422][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1230.125247][T25803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.132316][T25803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.155158][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1230.164271][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1230.185122][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1230.194404][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1230.203555][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1230.212903][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1230.241382][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1230.250034][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1230.266604][T18292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.386353][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1230.404751][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1230.447350][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1230.463585][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1230.485286][T18292] device veth0_vlan entered promiscuous mode [ 1230.495434][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1230.504033][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1230.518983][T18292] device veth1_vlan entered promiscuous mode [ 1230.560553][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1230.578555][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1230.592077][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1230.604625][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1230.622963][T18292] device veth0_macvtap entered promiscuous mode [ 1230.635469][T18292] device veth1_macvtap entered promiscuous mode [ 1230.658400][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1230.681780][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.700179][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1230.717830][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.729481][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1230.755807][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.782707][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1230.802601][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.824015][T18292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.832888][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1230.841132][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1230.864485][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1230.883853][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1230.916027][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1230.926639][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.937810][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1230.949306][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.959683][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1230.970508][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.980744][T18292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1230.991634][T18292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.003860][T18292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.011831][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1231.030186][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1231.149587][T12957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.185091][T12957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.225395][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1231.251097][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.293151][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.323935][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1231.401519][T18537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1231.417241][T18537] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000004d92a75a [ 1231.431989][T18537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1231.440745][T18537] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000004d92a75a [ 1234.375382][ T10] device hsr_slave_0 left promiscuous mode [ 1234.382088][ T10] device hsr_slave_1 left promiscuous mode [ 1234.393403][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.400813][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.412050][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.419622][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.430319][ T10] device bridge_slave_1 left promiscuous mode [ 1234.436616][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.445584][ T10] device bridge_slave_0 left promiscuous mode [ 1234.451758][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.464047][ T10] device veth1_macvtap left promiscuous mode [ 1234.470070][ T10] device veth0_macvtap left promiscuous mode [ 1234.478173][ T10] device veth1_vlan left promiscuous mode [ 1234.484150][ T10] device veth0_vlan left promiscuous mode [ 1237.381913][T25803] Bluetooth: hci1: command 0x0409 tx timeout [ 1238.343662][ T3253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.711194][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1238.728545][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1238.741465][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.759418][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.822358][ T10] bond0 (unregistering): Released all slaves [ 1239.001949][T18557] chnl_net:caif_netlink_parms(): no params data found [ 1239.080185][T18557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.087713][T18557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.099475][T18557] device bridge_slave_0 entered promiscuous mode [ 1239.110848][T18557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.118280][T18557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.134443][T18557] device bridge_slave_1 entered promiscuous mode [ 1239.160029][T18557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.172628][T18557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.205513][T18557] team0: Port device team_slave_0 added [ 1239.214538][T18557] team0: Port device team_slave_1 added [ 1239.233885][T18557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.240868][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.269246][T18557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.292656][T18557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.299620][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.327515][T18557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.372583][T18557] device hsr_slave_0 entered promiscuous mode [ 1239.380148][T18557] device hsr_slave_1 entered promiscuous mode [ 1239.400633][T18557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1239.410966][T18557] Cannot create hsr debugfs directory [ 1239.461830][T25813] Bluetooth: hci1: command 0x041b tx timeout [ 1239.529632][T18557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.536746][T18557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.544155][T18557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.551233][T18557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.622156][T18557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.642245][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.651502][T28410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.660607][T28410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.688959][T18557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.711478][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.728396][T28410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.735550][T28410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.755632][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.773109][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.780331][T12074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.816674][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.826858][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.842336][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.850335][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.866073][T18557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.880742][T18557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.891630][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.917686][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.926613][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.945258][T18557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.082801][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1240.099973][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1240.143143][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1240.151460][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1240.166906][T18557] device veth0_vlan entered promiscuous mode [ 1240.177710][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1240.187650][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1240.203876][T18557] device veth1_vlan entered promiscuous mode [ 1240.237931][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1240.247815][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1240.258083][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1240.269412][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1240.282624][T18557] device veth0_macvtap entered promiscuous mode [ 1240.298788][T18557] device veth1_macvtap entered promiscuous mode [ 1240.323214][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1240.334458][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.347106][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1240.358859][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.369683][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1240.381147][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.400607][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1240.412851][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.426087][T18557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.435790][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1240.462271][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1240.470427][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1240.492378][T12074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1240.504231][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1240.551516][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.561368][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1240.601532][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.611382][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1240.623827][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.641738][T18557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1240.661287][T18557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.676428][T18557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.696812][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1240.712335][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1240.889047][T12957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.919614][T12957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.959315][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1240.999766][T12957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.036411][T12957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.060479][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1241.175659][T18793] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1241.188376][T18793] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000006eff52fc [ 1241.243149][T18793] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1241.269325][T18793] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000006eff52fc [ 1244.110618][ T10] device hsr_slave_0 left promiscuous mode [ 1244.117933][ T10] device hsr_slave_1 left promiscuous mode [ 1244.125804][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.134704][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.144930][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.153687][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.163516][ T10] device bridge_slave_1 left promiscuous mode [ 1244.169685][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.178789][ T10] device bridge_slave_0 left promiscuous mode [ 1244.193247][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.208667][ T10] device veth1_macvtap left promiscuous mode [ 1244.214825][ T10] device veth0_macvtap left promiscuous mode [ 1244.220849][ T10] device veth1_vlan left promiscuous mode [ 1244.227149][ T10] device veth0_vlan left promiscuous mode [ 1247.220931][T16667] Bluetooth: hci1: command 0x0409 tx timeout [ 1248.417511][ T10] team0 (unregistering): Port device team_slave_1 removed [ 1248.434571][ T10] team0 (unregistering): Port device team_slave_0 removed [ 1248.446940][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.461984][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.524267][ T10] bond0 (unregistering): Released all slaves [ 1248.741268][T18813] chnl_net:caif_netlink_parms(): no params data found [ 1248.807277][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.816432][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.825155][T18813] device bridge_slave_0 entered promiscuous mode [ 1248.843976][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.851853][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.860040][T18813] device bridge_slave_1 entered promiscuous mode [ 1248.886049][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.898758][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.935052][T18813] team0: Port device team_slave_0 added [ 1248.945923][T18813] team0: Port device team_slave_1 added [ 1249.005248][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.017747][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.055022][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.077781][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.086046][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.114247][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.172071][T18813] device hsr_slave_0 entered promiscuous mode [ 1249.180239][T18813] device hsr_slave_1 entered promiscuous mode [ 1249.196898][T18813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.208310][T18813] Cannot create hsr debugfs directory [ 1249.310981][ T9591] Bluetooth: hci1: command 0x041b tx timeout [ 1249.379165][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.386304][T18813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.393728][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.400888][T18813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.516502][T18813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.538640][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1249.548701][T25803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.559424][T25803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.588751][T18813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.617088][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1249.631436][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1249.640416][T25813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.647540][T25813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.676601][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1249.686162][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1249.695159][T25813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.702328][T25813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.718920][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1249.761883][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1249.779973][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1249.790146][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1249.799624][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1249.808593][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1249.817394][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1249.826179][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1249.845256][T18813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1249.857800][T18813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1249.867490][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1249.876910][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1249.885566][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1249.921276][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1249.928817][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1249.958973][T18813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.098436][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1250.118666][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1250.156845][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1250.173555][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1250.194914][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1250.203848][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1250.215602][T18813] device veth0_vlan entered promiscuous mode [ 1250.233846][T18813] device veth1_vlan entered promiscuous mode [ 1250.268878][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1250.278167][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1250.286960][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1250.296525][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1250.314734][T18813] device veth0_macvtap entered promiscuous mode [ 1250.359268][T18813] device veth1_macvtap entered promiscuous mode [ 1250.405091][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1250.416171][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.428231][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1250.449603][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.468725][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1250.479659][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.489772][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1250.502830][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.519612][T18813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.530144][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1250.547516][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1250.557102][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1250.574262][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1250.590767][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1250.611226][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.626071][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1250.626128][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.626158][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1250.656963][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.667064][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1250.677693][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.688733][T18813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.697962][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1250.707176][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1250.864455][T12957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.877213][T12957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.919990][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1250.948631][T12957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.966311][T12957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.995863][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1251.082610][T19048] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1251.095397][T19048] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000003f5bd44c [ 1251.123170][T19048] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1251.138560][T19048] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000003f5bd44c [ 1253.684558][T12957] device hsr_slave_0 left promiscuous mode [ 1253.698021][T12957] device hsr_slave_1 left promiscuous mode [ 1253.721145][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.728692][T12957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.739287][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.747732][T12957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.757130][T12957] device bridge_slave_1 left promiscuous mode [ 1253.765289][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.773923][T12957] device bridge_slave_0 left promiscuous mode [ 1253.780571][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.793753][T12957] device veth1_macvtap left promiscuous mode [ 1253.799788][T12957] device veth0_macvtap left promiscuous mode [ 1253.806070][T12957] device veth1_vlan left promiscuous mode [ 1253.812341][T12957] device veth0_vlan left promiscuous mode [ 1256.819969][ T9610] Bluetooth: hci1: command 0x0409 tx timeout [ 1258.028650][T12957] team0 (unregistering): Port device team_slave_1 removed [ 1258.044435][T12957] team0 (unregistering): Port device team_slave_0 removed [ 1258.057036][T12957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.076340][T12957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.146958][T12957] bond0 (unregistering): Released all slaves [ 1258.311974][T19071] chnl_net:caif_netlink_parms(): no params data found [ 1258.389958][T19071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.397084][T19071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.407910][T19071] device bridge_slave_0 entered promiscuous mode [ 1258.440701][T19071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.447883][T19071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.456454][T19071] device bridge_slave_1 entered promiscuous mode [ 1258.480692][T19071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.498398][T19071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.538086][T19071] team0: Port device team_slave_0 added [ 1258.547627][T19071] team0: Port device team_slave_1 added [ 1258.575939][T19071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.583192][T19071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.610647][T19071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.635521][T19071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.645334][T19071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.684598][T19071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.768617][T19071] device hsr_slave_0 entered promiscuous mode [ 1258.776933][T19071] device hsr_slave_1 entered promiscuous mode [ 1258.792625][T19071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1258.807681][T19071] Cannot create hsr debugfs directory [ 1258.909792][ T8867] Bluetooth: hci1: command 0x041b tx timeout [ 1259.014648][T19071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.021783][T19071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.029155][T19071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.036318][T19071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.159451][T19071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.198731][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1259.217214][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.227761][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.255586][T19071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.273600][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1259.283509][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1259.292403][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.299552][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.318496][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1259.336559][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1259.345425][T28410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.352588][T28410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.360642][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1259.380250][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1259.389137][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1259.400968][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1259.423467][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1259.431804][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1259.442065][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1259.452481][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1259.461281][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1259.477942][T19071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1259.490568][T19071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1259.509703][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1259.518283][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1259.557437][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1259.566147][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1259.585438][T19071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.719104][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1259.730667][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1259.757827][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1259.767599][ T9610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1259.780142][T19071] device veth0_vlan entered promiscuous mode [ 1259.805196][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1259.814362][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1259.827564][T19071] device veth1_vlan entered promiscuous mode [ 1259.862047][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1259.872655][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1259.881417][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1259.900517][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1259.912872][T19071] device veth0_macvtap entered promiscuous mode [ 1259.940579][T19071] device veth1_macvtap entered promiscuous mode [ 1259.984624][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1259.995179][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.006056][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1260.016955][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.028931][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1260.041806][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.059521][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1260.074824][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.087148][T19071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.098142][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1260.108824][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1260.119713][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1260.128430][T28410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1260.141826][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1260.156352][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.168108][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1260.180393][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.191585][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1260.203112][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.213993][T19071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1260.225645][T19071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.238062][T19071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.247791][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1260.258768][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1260.420589][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.428796][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.481535][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1260.507676][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.526936][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.548014][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1260.643039][T19302] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1260.663549][T19302] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000009416d93a [ 1260.684953][T19302] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1260.693819][T19302] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x000000009416d93a [ 1263.216909][ T29] device hsr_slave_0 left promiscuous mode [ 1263.223441][ T29] device hsr_slave_1 left promiscuous mode [ 1263.232445][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.240354][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.248903][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.256513][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.265241][ T29] device bridge_slave_1 left promiscuous mode [ 1263.271600][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.280273][ T29] device bridge_slave_0 left promiscuous mode [ 1263.286433][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.299477][ T29] device veth1_macvtap left promiscuous mode [ 1263.305555][ T29] device veth0_macvtap left promiscuous mode [ 1263.314069][ T29] device veth1_vlan left promiscuous mode [ 1263.320256][ T29] device veth0_vlan left promiscuous mode [ 1266.338865][T12074] Bluetooth: hci1: command 0x0409 tx timeout [ 1267.519894][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1267.540330][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1267.556406][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.571654][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.633723][ T29] bond0 (unregistering): Released all slaves [ 1267.791937][T19322] chnl_net:caif_netlink_parms(): no params data found [ 1267.884650][T19322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.892565][T19322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.901145][T19322] device bridge_slave_0 entered promiscuous mode [ 1267.910492][T19322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.917679][T19322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.926489][T19322] device bridge_slave_1 entered promiscuous mode [ 1267.961433][T19322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.973194][T19322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.017802][T19322] team0: Port device team_slave_0 added [ 1268.032151][T19322] team0: Port device team_slave_1 added [ 1268.052089][T19322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.059123][T19322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.085116][T19322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.098157][T19322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.105249][T19322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.131457][T19322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.165764][T19322] device hsr_slave_0 entered promiscuous mode [ 1268.173782][T19322] device hsr_slave_1 entered promiscuous mode [ 1268.180834][T19322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1268.188396][T19322] Cannot create hsr debugfs directory [ 1268.305212][T19322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.312377][T19322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.319823][T19322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.326894][T19322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.397247][T19322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.417700][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1268.427062][T25803] Bluetooth: hci1: command 0x041b tx timeout [ 1268.434456][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.443811][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.463407][T19322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.477767][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1268.489165][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.496247][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.521806][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1268.531752][T25813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.538913][T25813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.560837][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1268.571821][T25813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1268.593208][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1268.602495][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1268.611330][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1268.623703][T19322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1268.651752][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1268.660653][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1268.676510][T19322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.796350][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1268.807450][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1268.853993][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1268.873152][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1268.893683][T19322] device veth0_vlan entered promiscuous mode [ 1268.910010][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1268.917884][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1268.942565][T19322] device veth1_vlan entered promiscuous mode [ 1268.977624][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1268.987304][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1268.996517][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1269.006432][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1269.019205][T19322] device veth0_macvtap entered promiscuous mode [ 1269.035126][T19322] device veth1_macvtap entered promiscuous mode [ 1269.064447][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1269.075197][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.087178][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1269.098848][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.109735][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1269.122087][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.133267][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1269.145209][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.157843][T19322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.168107][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1269.179012][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1269.187159][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1269.197556][T25803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1269.210913][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1269.225541][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.237129][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1269.249104][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.259962][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1269.271403][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.282319][T19322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1269.293831][T19322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.306391][T19322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.318197][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1269.329618][T16667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1269.466252][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.497899][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.527615][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1269.568232][T28271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.591636][T28271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.623240][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1269.764032][T19557] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1269.780554][T19557] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000fed5c0d6 [ 1269.810030][T19557] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1269.828490][T19557] ref_ctr decrement failed for inode: 0x3620 offset: 0xdc17 ref_ctr_offset: 0x4 of mm: 0x00000000fed5c0d6 2021/08/18 08:46:23 executor 1 failed 11 times: executor 1: exit status 67 SYZFAIL: both collide and fault injection are enabled (errno 14: Bad address) SYZFAIL: child failed (errno 0: Success) loop exited with status 67