EUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000200)={0x6c, 0x10001, 0x3f}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x4e30, @rand_addr=0x64010102}}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x29, 0x1, 0x97, 0x6}, {0x1, 0x3f, 0x80, 0x59}]}) fsopen(&(0x7f00000001c0)='ext2\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b68, 0x0) [ 904.679162][ T1717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000000)) r3 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x5, 0x181000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000140)) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x800, 0x9c000) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDENABIO(r6, 0x4b36) splice(r6, &(0x7f0000000040)=0x1000, 0xffffffffffffffff, &(0x7f0000000080)=0x3, 0xada, 0x2) 21:05:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 21:05:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5601, &(0x7f00000001c0)=""/155) 21:05:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)={0x5, 0x5, 0x4, 0x4022000, 0x4000, {r6, r7/1000+10000}, {0x4, 0xc, 0x9, 0x20, 0xbe, 0x7, "6f869154"}, 0x5, 0x3, @planes=&(0x7f0000000040)={0xffff, 0x5, @mem_offset=0x2, 0x9}, 0x7fffffff}) fsetxattr$security_capability(r3, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x40, 0x7d5f32a9}, {0x101}]}, 0x14, 0x2) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:15 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f00000000c0)=""/150) 21:05:15 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x81, 0x505002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) [ 905.032853][ T1745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5602, &(0x7f00000001c0)=""/155) [ 905.196650][ T1748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/221, 0xdd) lseek(r1, 0x2, 0x1) ioctl$void(r1, 0xc0045878) 21:05:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:15 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x800, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x5, 0x7) sysfs$1(0x1, &(0x7f0000000040)='lo\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x1f, 0x7, 0x6, 0x7d9f6565, 0x480000000, 0x100}}) ioctl$GIO_FONT(r1, 0x4b40, 0x0) 21:05:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 21:05:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5603, &(0x7f00000001c0)=""/155) 21:05:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/132) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xc44b, 0xc3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_uring_setup(0xeb0, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x2, 0x335}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r5, r3, &(0x7f0000000040)=0x5, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDSETLED(r7, 0x4b32, 0x3) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000080)={0xff, 0xfff, 0x1, 'queue1\x00', 0x3f38d0a8}) 21:05:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) 21:05:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$GIO_FONT(r0, 0x4b68, 0x0) [ 905.450349][ T1776] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5423, &(0x7f00000001c0)=""/155) 21:05:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5605, &(0x7f00000001c0)=""/155) 21:05:16 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40480, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b40, 0x0) [ 905.600693][ T1781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3d) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 21:05:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b68, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000025c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@local}}, &(0x7f00000026c0)=0xe8) r4 = getuid() syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x59e1, 0x9, &(0x7f00000024c0)=[{&(0x7f0000000100)="0e43cba9d45d630fad26628c79b28e405b08e31d1f0084d6001a", 0x1a, 0x81}, {&(0x7f0000000140)="12829ee5f80bc267e1c7ebad94725399b2969ae2737f30fede38faf5ad09f16ced4afaace14ac0ac046923d44aa048e78b", 0x31, 0x8}, {&(0x7f0000000180)="6331daa71850e4f3f7064f4c88b84dd637c2d85f19ab6fc8e0823102ef237a41f74e3418736ae3357d42be423600b8be22b9ab8626e5e58fbf3eb926a299dae35063c4558edb6f21ba4257b51606587da5c27aa056efabdf0a0c7c005d8b49fa7ae1bf6dca528fadf393be0ba714dbb9c091a18705643ea2f5e1ff5ebaa2421a5a67b4f90361bc7fb88ef2c10da7c3216a4f9224b8b59bcf8909eb50f32310918330abdcdf2e", 0xa6, 0x2}, {&(0x7f0000002a80)="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", 0x1000, 0x100}, {&(0x7f0000001240)="ef40e6bae0d9e36623febf589ff8fc44771c30abc00a9bb4e3830f3a105da74285521ab1561aab1149c4d65a7545fde5b8eb7f897babf8b8093d4cf4d25086f795add6f6f1b9d73161d87b", 0x4b, 0x9}, {&(0x7f00000012c0)="8857061dcec203d94ba742d27c5b4b6d810e4f2d59955833a4bf3559aeae17290bb794ca9a3780b64a3c616bbf706517b0895c6611ffa978bcfe4a9d32b548b449638e724eb29ca97a2a1e428130a97144da13fa59bbe5932bf8d28a016a59e469cde7bfb858335d85b56d0e0ba01954c5df23da14692bf0ed2b04c14b4078dfdad79dbdd6aa3643f7c3831285f7782df68ec18633b62d1cf8d9ddb58b540595d89869475df753d2addf1431694551583d506ed9bd2655b89a99dae5e5da5f840a6f09de134e8bc25d283c6dc7e384fddf1f49d43f1bf4c1aee8807abcad98efffbf5de96a86ee28d0b9319ed030a1bc5e201bdebff98b0b1ea346bc66e7a6235790e116399792f8137d66de1c0ebd8f45b407b88084b43adb0cc92e3f14b82afa503d71ef443d5cd99743db44099931641329a436a470e4200509375ab0ee1a8e4f0ff98db22779ae0fcd33537bba065f11dd806e7a6d1eb00a40eea70a0ab21df0219822ec9bee6ac57e623cfc5d352f12bb41444d11f13d9c12a2a2ebc389fecba3d1d1eb42e3f90b9ee0b747a22d0a6b999ab2b50af4abb55c7099e7cc746b200ba0f9fa9d62c0075cb373bc26e3d62d96e51c6a631c6a95c6a922c4e6a3f7c783f8c3bb5fd4e08e79600f80b8854751ee9fff6524863fed76d6b6c3cb26574abd72a883b531d9614e542fde011ae701e9cbfe9b19fcc692e8bff64eb2d11aeb71dde8f0112a59e735480856278cde3869c47c5c955251b2756222932bee3b06bfa26c6407c375ec6a7171c567d3db506be983390813b74fdc41c1fcf518bbdfbe215d3fe1bdd8f356902fef5ec5108009e62aee8ba220c54b0d9bdeb4435e662eab437253b8c6f2ddbc49f2788bc16d1e7b2e7a1f40aea01e2d10532568ecc3dc5678c4045c2e9f07d113070373125b31b4d17b63ffe244a8d19500fbeb9198dee74d4f5e851ec9f8dda04258104f7f1a645bdf8dc95b92915d1dcca08fb0bded4e3e50c8e9d1d7a3d24a3b18ab821ba29761efab4cffe450c4a1885f935ce40fc44935a91c4ac3fffbcd2ef1c2b519d1f129d59fad0bb616d9a93474d9b3514947c3516dc6dbdac3520448a6f02188c52f043ea9abc434cd1b2268db32fce7167d13081ef37b8e1f3c46a7900a0d84daffbe6126b5acf666261f09b46692393ad56f7161d9cde9edac7163b95438d7be7d1ae94bff601eb0bc78d512b555f296427ebde79e2086a3671c596df9f8651faf30f8ac2fc58f201cd1011c72dcfedf0ebf6bd6f9d7f27c6237a9858a7b166812fae8a9256238d76182022191c32154bf67f8f5110eaf77fb4c50065bfd6e194c62ba6d0f905fb7a0e7aaf5750171173c51f7cdf88fdaf5ce5a7a02d0a26cfe319c50410585e37a45be0dc4177726ec7482a4d2a4589ec5080c44b56afff57fc279542955d2a63398e299a35ce2c0bacaebc7385fb567698a96cf184a06493766b2266ed75ba284e617eaeb9eb7a48188ea631289393d94dc9bdbed2384ea8615e3388f5ee0f164d50012cde855cbf782827492ff16fa4a950520249c687c043871886e276bb5a8e4fb2435d33faab4a66e2c13a4e69666b8139f62f0eebfb7139f130f395195e9c6fb4748a9ffb7088c1338bc221b300191e238d4f7c247e76247c77f8e49b4333e5f2cc2406a3a37c652dba68118b8c80650e0c73111cc087fadf29b15d75abd13d9009365c22c195cbeb67333026d1b01925f36b7e320ec46b671377b99ad07062180e3ee947ec277f6a1ac6fa48cb58d4cc181d673a8dabdefe6a3b4e9006f5b0808304602dddccc11d8d9481fcb84d3db3aaaf3dbfc2515aa799193f247c58757375fc808f39875b67a0f40afff74ce2130966eb95a3ce37895b0116e8a023665fb6e490894afcf4b8c55d921e0ec3104f1d4830126bc205821219eb62dd3f4ca79f9d7eeb1c3c78ade4f49022f08ac2ca214565c04d9b8e417d7d8d9b4b18921eed25fd8043ccb1bbd068ac771d22f6e8c52552ddab7c7ed39ed68188156209b969e6731fd1d57d4a9a14c773660a5a11980fa1728b752af9ddb06a0c87540dc63961d24a80f863c9590bb9c7bc2d96d47f98bcae1db4a556be539c3238aec02afd112b6c32eabb18d6b0e6d15103eafa60b5f04fc91bc609fc60ea77bed38906d5244f8c76741b6e4f8b26461fbbcab0f642db41c2a3e877fe76aa7d76b6c7ed0b0ab64f339760d7771206ee715200159070134062534c5f77f95242a4432dbe5470d94a6cebf874a3a08b033920f7a1a656e3f8757292375e127805478cfcba84eb743bbf1a8e89081d6061fb86ac3e2c30020251775eef8b6abeb86151f971740ccfbdd8dc41cf6a111166d914c640e11564a5e1a1f03ab1ce77b2c46d3413c74a721245d393b8038046263165c40bf3306e335358ee042d00c021f1b5cc9d6edc0a4cccf267ec342c19c078189e03f5484dcdbbbae9a4ccfe2518642bd21b5f0f943d36dee82118d0069c4b56c25d7a7945a9e257573311bb4c3a153706b71e7759a3cc3e4980621dfc770823e19579f64110147153452facf0c2174d4bc3e742659ce79e9f4fbb2e9d8c2d8feccb58894cb5039efe844f20bcd75ed36a1e5489b7ff77e1bd672672421dab891f35cbcbbb66f64bda52bff2308208f9b18aa61684c1b546802fdbd01f20428540a759b29b369d19b217924731dcba60fa122aacbf3b89bcdf0fe3866aa6055374f2d86fa2637c00559cd080f9c19a4f647d3581aebf92d66ac59843dc7685e4bc516bf76cddd45b55b5c1eee323657e0d53a9721b8a7fdc06d2f8cd33c0bcc47fede2d49c57e85b43d569b1c754e90a377b29e2c8919a6d76ba1d6965323b5b04a730b1dd3fa9a5a277079a681c0e55003c33ed89277f5fa1e147d93eb2346f589ec6cff9e518e7282730dc1a83cb05ea1af75c40c208784abc40d964bcefae21cb6ca3f083418ce54d935760d62afdbad9dc73e57fafceb7d53536020deb49dddac454d9811b3debb9c800ea00f1248ff46a1b5831eb11aa29ddd638404dc3aab7cd71684765adce8ea6765d85e70a724bb21001dede0de129399935a32eca869a824dfd219ed60c470935d90ef92301c973b1aa0f4f7485094d5b9432f281e11ad4297a1422351db8e810592403829f413cd0332bf862e46dc33240eeba01bc2983ab747cf1debb823db785a512a635e3faa29275342a1abde68b18a069af5b18909e88ba439aa82888852c39af7f7ecbe1b2c423133d5da6074db09981c251036ca220ec805d53def2080b3068010cc76ad11cc6d780d35c435a9c829c5909ef634529fc7ce22d07aa75e1c8d8c1c970caf0d1275239adfe2da9e3ac2cfd4b2543221dc7d706f1c98071601744e200fc521df895bf54ce4dc7b487f234e2ba09faab2b6ca33e56d9c6dea84f9d998791fa231e5fd5f4fd89ad43f27b05c3c5cac4fed5056dcc823059e670848698d8eb144a4d65035c3d22c94b4374881868dd952f18a04b29c734fb8ded9d2ca40c873158eb3f6ab264e998f7309bb94429f8f3d816c045aa8a76b5051efb5fa413e6d642e6fe29c0de9f18985d8af897a91e539d161e7599c6eb3ed04ca2efde2c90aa3f5e2b90ae60307c650ba21e5bc0eac35e90a88e78f32f94fa7116178f15fa75882c90b887205c9c35c8b7f4d7feefabf728f5121b564d1e1abf859cc3d433c23be6c459e3ac3a611fa82d23dd68fa32a8308add04b0b58885b5f2013d298f12dc499d2788f839a2cf23a4769d70d7bc5c03118ce77c0f19e23842f82efdb1563b7d23d4edfaa7a33b8b97fdcf54e435faa66fecbb4290d11e1a2d78b09da24eba7e74c41591b7765bf46bde54739d3fedcb58a2ef060533b35c44a9081cc2f8ed5103b1f553a51b33de2b50c76bca0899a040ed39310b6fe67d27a62b8fec0905a6e4ce36d3b41feab83db5e64ea624d36475d42617d7d4e1a756ae0a612cdffdac55830aa30446c3133f34c0e900ba24537050ae574840c5890f34bdacfdbaf67a890b62d6b651d5e92b27c3b8a995f9f52e6f64096e0421daeb6e3acbe9823e6c6d1f3cd94cc836bb2924e7ec74c24ae62a5ef21c24cf8d49479ca2a95abd06db53c82abab7f3492f37b45230963143b8d9fa7b57ea41adff9bb57364eba8c912da925043cf59b674d4abf20e60f68027ea05f1f5951d95046459b7301fe5171208999ab9603ab4ba371ac3e5e0d46c72457bc5ef2238e663394def50c5bb28738aad713ccdb9bba581275302077e144a044218cf1a73b3837bb4d86955fd16f98645dab2ee4f525172eb6be654dade0b14b150672daa807f3ed69ec152e0624867c20158e12318662f6f16e7f64bf8adf78f4a3f9e9224503fe341481a699563ce32b597e03f815132436ea6a0d5c1b6c03385d99bcb60d138df3baa9eec8cf82eef3e03220661acd38317591f86a84ce1f6e628182d04d99af7517896b4106676c8bf328889cb3f57a36d8d6ca94daf59ccbb4a4fb2746f36c6da5cb62e5dd461512ad7f4201a65f473a45300e2d1ce34f5e89d51da093c01a88035c09cdd4481dda23c56a4b5c22831c2b172c825a1ef0d4a4031e5f0a6bb64444308bd2df9a9de63ff81f16c8ae9d6ceb70d21be39f072297056bff20e9da025146842eb482ef23cb072560f4b713b09ccaf40a376d641886b83fc598fda33791e351f5952df3a5317ed899eec5d934a2c0140bbbaeb56c8068c947f6d0f377bd9d0e3acfc5ffcd2ff4ad2605fb1074f1b50b409e640f763c0f7c6bca8f76dd34abfa67ca684f70749f98673ae972f1dd1cf6240f2cc450715d813adb85adde434391d230ddfeca9fa6edb30441e5bd05232cb1790c7152007734e12ca7405406b386323c6babca371ac159baf86fa7f73f2b0237c33d56a88ec15fb05d43f3f8de54f5f3eed61cf256588853260e994f4f81b7307a373f9d6fbe3edfd5edaeb1d6e7993796a19c802438b05286b1da4ea844c75f7e425265e313ff0f8305d3bba5fd63498dc50b5e8ca0d24d6aa9fae860ae86ad54e20e7c1de075a63a5387b29a1c662ac1060fae89648b690aa9e1969e29191aede95198540c3ecd83a3ce41fe729b446685c9395c0483a009462398357e53da13e78cbfd630e55ec148960a50867ad902c1baa52005a283f84635438259da18167d56e34f47a05a27525e070c221aab8b4ddadf838f079cd2761b5da7021bb2a8d2a2c488c933b60375fa3facbc82ed5c38cbd104704af550dd2bbe1310a29e40a40963f3d1cf6d48eb2951e507fa8426b71e88c9f4dc2ce88eb985f148d9c3135c389d7427a622029c2622bb91871e9c062b67250b7234590cc5857c6ac28ed36156407c4c7ea4bff357a6b08d210e7591efd2a7e4ba5e56be4b04c9d2194699eb4fe17c2d349268f3ac57f22e83cfcb2f05d3e7683d982a567e9ede1c76851b96ab13cde86ff71f4eee11217109b3b7d3294ab76bd5ed6bf08e3f1319563b4b891dcea55c246d7b0b976a1c6432d5c937b293e437259c7171e460ff5bbee83d1b4872e4e59da02630d8189477ee080bbbaed4bbe93666345cf51e1b17dec961f8ce43a8cb86d78f4934b96be2d2e1b176019771afce2ec77866b04aec5ae6fcd374da4d6f3ada6b2d11d6b87adb0aedb019a8fc5a0bb8df39c946470a16274977287c0903d061dac6d1fc17c378b6c2ddfbde8b282be708c0a2494f6c0b9490ee06a29c07371974ae12790bafa72d3a9d987002d606761366eb96d1b2c5e54bcb397e93079517a24ab62a58bec608", 0x1000, 0x400}, {&(0x7f00000022c0)="0143fcd8aa5efd070acc759225481285d808558577540c26b717cf4b7e3bf5a9fa9c9655e8d087f509390d5db67a59f23eab343c7762e30157e7a96e77a98f1676f4f819a31187b8d7b3cf745add5ff0f8247f7c65857fef4cc9d2d7704fa74907c67741ad91dbf25d5303e1fab6ba09029ef391b75b454f2a322a472b6b8f1db3e26937bebde6c83d35d7c7560d8f775d82b736c5c65da8b77894dff0f23321a0", 0xa1}, {&(0x7f0000002380)="439468f09cb5330a3e41d56862b6a2742356ab0b10a0a2d7f62479ff3276218865a184a7bfde2f5d03004e06d15a68cc5bbf0a12e6fc88f79f6c2589ad4de7d244018c41d2434e623cb8d19ecc36ec9c6a53037270347da65bd0a7733182da64555453cce02783f7c824fe8e60c9fb043271f2800559a21f4b5e85c04706276d7cf8931bca22fae9", 0x88, 0x1}, {&(0x7f0000002440)="19e5dce1f21715d1173e43740756befccf503864d7a2091282c3cde6279d72ddb7beab9a38b1f307b66f97039cf2eaa1159a6097bb46676ef63819e7e84a6148af1ca70a6e", 0x45, 0x3ff}], 0x2a026, &(0x7f00000028c0)=ANY=[@ANYBLOB="7768696e745f6d6f64653d66732d62617365642c6e6f696e6c696e655f646174612c006f686561702c61707072616973655f747970653d696d617369672c66736d616769f94a08e10ceb2ef2ee14498c7b41cd6d633d307830303030303030306130303c303030302c66736d616769633d3078303030303030303038303030303030302c66736d61677edf3d3078303030d20de1320f93c6225216e530302c7569643ef8c830000011736b9af459ea0ad40efab81fce5031c46934687540c506edfb6922403661d49773ffea5c421153636fe8872fb71cce699b33cd5edbb2aef6726958fdab1384333ec080c478e0bfc41c7bf0ff10592c6aab16f63c106993ce6ed0b9d25652e82904c1e910da6055cd7e296fcbf4feb616674e31fbaf5c8fad37a2dff24c5f", @ANYRESDEC=r3, @ANYBLOB="2c6f626a5f747970653d2c7375626a98ebecfde64d6c6c7e82f39ca53a3d6e6f646576", @ANYRESDEC=r4, @ANYBLOB=',context=unconfined_u,\x00']) 21:05:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) umount2(&(0x7f0000000240)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r1, 0x0) ioctl$GIO_FONT(r0, 0x4b40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet(r8, &(0x7f0000000000)="711ab47cd55b81b3607c48ee66e3e0debe5de9c9f71d221744b77309ae83d7594b2a76f0a657c6626702c71610c7537f1fb155b94a7cc7f7fc677d75b19b7937bbf4f45bf76aa1184741255bfc305e21e1039b2925f336e464f3a4a3da1abb78141b54772d99751c0b53e58a717d662a94ab9039d6252dab56978d7ac2089b4fabfeb203c2b4352b9f18f5a1ace0a175087126477004ea2d23735dbce89a4630dfecf71bfdd4c440a80806e11c8de6e991252aafbea80e2dad9821d505fb19f1febde687f57adf19e0b60fbc4980db113f35e62f21b965de22b3b958579e34fa8f0b0ce631a76be72741009b59a687b67303", 0xf2, 0x4, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) 21:05:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r6, 0x5, 0x2, 0xac}, 0x10) 21:05:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5606, &(0x7f00000001c0)=""/155) 21:05:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000010105000000f8ff000000000c00000520000d80080002000000000027000500fc020000000000000000000004000001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400000, 0x8) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@initdev, @in=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000480)={0xa00000, 0x3, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9b0908, 0xef, [], @p_u8=&(0x7f0000000300)=0x2}}) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000000)={{0x1, @addr=0x946e}, 0x8, 0x1, 0x3}) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) 21:05:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000000)={0xc83f, 0x6, [0x3f, 0xe16, 0x7ff, 0x3f, 0xff], 0x8}) 21:05:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x2, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a75, 0x7, [], @string=&(0x7f0000000000)=0x7}}) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5607, &(0x7f00000001c0)=""/155) 21:05:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 21:05:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 21:05:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setflags(r2, 0x2, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) truncate(&(0x7f0000000300)='./file0\x00', 0x6) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000280)={0x0, r3}) ioctl$GIO_FONT(r0, 0x4b40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000000)="5bb550cf2056680c576cf7494e4e3df6ee7c99e3fee1b5ccaacaa4a0247aaf5708ec2649fed2a08b45d0ae6b14f378c15d915908365ef7707403225d74fdeaec03e36b7bcced0ec05555f02a121bee0b082d9f2ec5f6", &(0x7f0000000080)=""/113, &(0x7f0000000100)="dc3bfcd29c8c1955d6b5288464ae765a", &(0x7f0000000140)="ac4a2a5314ecc671f2c55b2ca6f307c74bd6f4433d2e132b25d110b1fb3924ec059b197bdab3adfef350ed9c6176f5c91cf2703deb1ab14c212e93c50b201c84afd9ce4942ba79ab0a91f844621ff541aa22c55b98c33286edf58a27994415540aca63be825369d2145829e4e3ecd4fd8a12edf6e5c7dfecb5659eda0038cbd68c34b5cf25badadeaab50127e728731209a76f9fde335015b482333cc7bd8ea43490dd5a1d7ac78b165fd716f59a9034b6b52e5b792eb332590cde74fec3a31528a8", 0x6, r5}, 0x38) 21:05:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5608, &(0x7f00000001c0)=""/155) 21:05:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 21:05:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'ip6tnl0\x00', 0x5}) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:16 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf3e, 0x40000) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6a, &(0x7f00000001c0)=""/155) 21:05:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5609, &(0x7f00000001c0)=""/155) 21:05:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000200)=""/206) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_FONT(r2, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) write$binfmt_misc(r3, &(0x7f0000000100)={'syz0', "63ab5d0360f7c099abd3df44f0a5099b78b998d961df3ae9785226c200146708b5b20d9dcfc08885ce7aeec6ef5058d49990e4205f523b9275899ee4f2d805f5219b07267f366af8122256855a468be6612f96dc7d313a0e996d865503a83e307d427e9e871654bace4216aff990941455fea679cbc4708ccbad95311cc9ce82f0ac0c6e232893884f3b1d5b4eb49bf7430cf79454601e396bdc9bfff47335e15d97a4070c47ef528b51571d0ca37b5aae9cce597c93a666ff4ccdba5cd77da767cfea791df25bbc670e977870"}, 0xd1) 21:05:17 executing program 3: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 21:05:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560a, &(0x7f00000001c0)=""/155) 21:05:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x100000000000000}, 0x0) 21:05:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r6, 0x7fff, 0x10}, 0xc) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x154, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbaf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9c6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x8002) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f0000000000)=""/161) 21:05:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560b, &(0x7f00000001c0)=""/155) 21:05:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x5, 0x7f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) r2 = dup(r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x81, 0x1, 0xfb, 0x20, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x5, 0x7}, 0x48, 0x3, 0x7b000000, 0x1, 0xfffffffffffffffd, 0x8, 0x5}, r3, 0x80000e, 0xffffffffffffffff, 0x1) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x189000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 907.037740][ T1926] QAT: Invalid ioctl [ 907.083640][ T1929] QAT: Invalid ioctl 21:05:17 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:05:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/154) 21:05:17 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r4, 0xffffff19}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r5, 0x0, 0x6, 0x9}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000019, 0x7ff, 0x0, 0x8000, 0xe0}]}) ioctl$GIO_FONT(r6, 0x4b68, 0x0) 21:05:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560c, &(0x7f00000001c0)=""/155) 21:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1200}, 0x0) [ 907.266422][ T1946] FAULT_INJECTION: forcing a failure. [ 907.266422][ T1946] name failslab, interval 1, probability 0, space 0, times 0 [ 907.317090][ T1946] CPU: 0 PID: 1946 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 907.325684][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.335728][ T1946] Call Trace: [ 907.339053][ T1946] dump_stack+0x11d/0x187 [ 907.343484][ T1946] should_fail.cold+0x5/0xf [ 907.347995][ T1946] __should_failslab+0x82/0xb0 [ 907.352764][ T1946] should_failslab+0x5/0xf [ 907.357178][ T1946] __kmalloc+0x54/0x640 [ 907.361370][ T1946] ? tomoyo_realpath_from_path+0x85/0x3d0 [ 907.367166][ T1946] tomoyo_realpath_from_path+0x85/0x3d0 [ 907.372715][ T1946] tomoyo_path_number_perm+0xff/0x360 [ 907.378088][ T1946] ? _parse_integer+0x12f/0x150 [ 907.382963][ T1946] ? __fget_files+0xa2/0x1c0 [ 907.387562][ T1946] tomoyo_file_ioctl+0x28/0x40 [ 907.392433][ T1946] security_file_ioctl+0x69/0xa0 [ 907.397377][ T1946] ksys_ioctl+0x5a/0x150 [ 907.401623][ T1946] __x64_sys_ioctl+0x47/0x60 [ 907.406224][ T1946] do_syscall_64+0xc7/0x3b0 [ 907.410736][ T1946] entry_SYSCALL_64_after_hwframe+0x44/0xa9 21:05:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r1) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$assume_authority(0x10, r2) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560d, &(0x7f00000001c0)=""/155) [ 907.416623][ T1946] RIP: 0033:0x45c829 [ 907.420528][ T1946] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.440131][ T1946] RSP: 002b:00007ff8abbeec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.448627][ T1946] RAX: ffffffffffffffda RBX: 00000000004e5500 RCX: 000000000045c829 [ 907.456594][ T1946] RDX: 00000000200001c0 RSI: 0000000000004b48 RDI: 0000000000000003 21:05:17 executing program 3: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x81, &(0x7f0000000040)=0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f00000001c0)=""/155) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x8}) [ 907.464659][ T1946] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 907.464670][ T1946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 907.464681][ T1946] R13: 0000000000000329 R14: 00000000004c58dc R15: 00007ff8abbef6d4 21:05:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560e, &(0x7f00000001c0)=""/155) 21:05:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000100)={'ip_vti0\x00', @ifru_mtu=0x3bf2}) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) read(0xffffffffffffffff, &(0x7f0000000000)=""/235, 0xeb) [ 907.627164][ T1946] ERROR: Out of memory at tomoyo_realpath_from_path. 21:05:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000040)={0x7, 0x59fd}) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x76a1, 0x7f, 0xbf25, 0x3f, 0x0, 0x1, 0xfffffffc}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1300}, 0x0) 21:05:18 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:05:18 executing program 1: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) lseek(r1, 0x80000001, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x191800, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@private1, 0x27}) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x0, 0x9, 0xfff}, 0x10) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'vlan0\x00', 0x8}) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000001c0)) 21:05:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_GET_FP_MODE(0x2e) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x2, 'vxcan1\x00', {0x7}, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x800, 0x70bd28, 0x25dfdc00, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040880}, 0x20004000) ioctl$GIO_FONT(r2, 0x4b4a, &(0x7f0000000000)=""/155) [ 907.851082][ T1985] FAULT_INJECTION: forcing a failure. [ 907.851082][ T1985] name failslab, interval 1, probability 0, space 0, times 0 [ 907.885932][ T1985] CPU: 1 PID: 1985 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 907.894522][ T1985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.904567][ T1985] Call Trace: [ 907.907860][ T1985] dump_stack+0x11d/0x187 [ 907.912260][ T1985] should_fail.cold+0x5/0xf [ 907.916773][ T1985] __should_failslab+0x82/0xb0 [ 907.921597][ T1985] should_failslab+0x5/0xf [ 907.926081][ T1985] __kmalloc+0x54/0x640 [ 907.930243][ T1985] ? tomoyo_encode2.part.0+0xd0/0x240 [ 907.935630][ T1985] tomoyo_encode2.part.0+0xd0/0x240 [ 907.940836][ T1985] tomoyo_encode+0x32/0x50 [ 907.945258][ T1985] tomoyo_realpath_from_path+0x11e/0x3d0 21:05:18 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f0000000100)=""/159) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x9b3feea2e325eaec, 0x0) [ 907.950898][ T1985] tomoyo_path_number_perm+0xff/0x360 [ 907.956278][ T1985] ? _parse_integer+0x12f/0x150 [ 907.961150][ T1985] ? __fget_files+0xa2/0x1c0 [ 907.965833][ T1985] tomoyo_file_ioctl+0x28/0x40 [ 907.970598][ T1985] security_file_ioctl+0x69/0xa0 [ 907.975533][ T1985] ksys_ioctl+0x5a/0x150 [ 907.979891][ T1985] __x64_sys_ioctl+0x47/0x60 [ 907.984539][ T1985] do_syscall_64+0xc7/0x3b0 [ 907.989050][ T1985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.994942][ T1985] RIP: 0033:0x45c829 [ 907.998909][ T1985] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.018537][ T1985] RSP: 002b:00007ff8abbeec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.026945][ T1985] RAX: ffffffffffffffda RBX: 00000000004e5500 RCX: 000000000045c829 [ 908.034930][ T1985] RDX: 00000000200001c0 RSI: 0000000000004b48 RDI: 0000000000000003 [ 908.042910][ T1985] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 21:05:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @null, @null, @rose, @remote, @bcast, @rose, @default]}, &(0x7f0000000080)=0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b4a, &(0x7f00000001c0)=""/155) [ 908.050946][ T1985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 908.058914][ T1985] R13: 0000000000000329 R14: 00000000004c58dc R15: 00007ff8abbef6d4 21:05:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1400}, 0x0) 21:05:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r6, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20}, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000000)={0x90, 0x0, 0x2, {0x5, 0x2, 0xf2, 0x14, 0x4737, 0xfff, {0x4, 0x4, 0x0, 0x8000, 0x4, 0x8, 0x5, 0xffffffa9, 0x8fb, 0x2, 0x4, r4, r6, 0x5, 0x9}}}, 0x90) 21:05:18 executing program 3: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f00000000c0)=""/160) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x800, 0x68d}, 0xc) [ 908.320671][ T1985] ERROR: Out of memory at tomoyo_realpath_from_path. 21:05:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560f, &(0x7f00000001c0)=""/155) 21:05:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x16}, 0x1, 0x0, 0x0, 0x80}, 0x90) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000507000000000000070000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001340)={@remote, 0x0}, &(0x7f0000001380)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000002400000e8d89be0500"/25, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x5}}, 0x2000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000040), 0xc, &(0x7f00000018c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="24d6cc04", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="580102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600a424f41e138a1e2a82181dc8b6c7484251da2de56345126c92f390648207705bb61d", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="4401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000430000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="bc01818038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600cf41a6035a2500451ffa7eaf31228e1c5f5df5b6fa7accf0e3e15062ac11942ac9a99e0b31504b955b904471618fdeb650ef56da39f0df8e472138723118ba8e275a4edd9b97a28a262b1d6942f5a3da1b65c6efc87d19ebfd6a1c056d8bc20516af3c226a", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x13}, 0x1, 0x0, 0x0, 0x40080}, 0x9052) 21:05:18 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:05:18 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2828c2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) pidfd_getfd(r3, r2, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040)) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_FONT(r6, 0x4b4a, &(0x7f00000001c0)=""/148) 21:05:18 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r1, 0x4b68, 0x0) 21:05:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5865}, 0x0) [ 908.502647][ T2028] FAULT_INJECTION: forcing a failure. [ 908.502647][ T2028] name failslab, interval 1, probability 0, space 0, times 0 [ 908.519233][ T2028] CPU: 0 PID: 2028 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 908.527819][ T2028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.537913][ T2028] Call Trace: [ 908.541209][ T2028] dump_stack+0x11d/0x187 [ 908.545554][ T2028] should_fail.cold+0x5/0xf [ 908.550068][ T2028] __should_failslab+0x82/0xb0 [ 908.554837][ T2028] should_failslab+0x5/0xf [ 908.559257][ T2028] kmem_cache_alloc_trace+0x26/0x5f0 [ 908.564548][ T2028] ? security_capable+0x8a/0xa0 [ 908.569405][ T2028] ? ns_capable_common+0xad/0xc0 [ 908.570496][ T2035] __nla_validate_parse: 18 callbacks suppressed [ 908.570507][ T2035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 908.574359][ T2028] vt_do_kdgkb_ioctl+0x70/0x8f0 [ 908.574442][ T2028] ? security_capable+0x8a/0xa0 [ 908.574476][ T2028] ? ns_capable_common+0xad/0xc0 [ 908.604754][ T2028] vt_ioctl+0x39d/0x1d90 [ 908.609009][ T2028] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 908.614908][ T2028] ? complete_change_console+0x1f0/0x1f0 [ 908.620544][ T2028] tty_ioctl+0x8de/0xd80 [ 908.624787][ T2028] ? do_vfs_ioctl+0x3a4/0xd00 [ 908.629474][ T2028] ? tomoyo_file_ioctl+0x30/0x40 [ 908.634416][ T2028] ? tty_vhangup+0x30/0x30 [ 908.638833][ T2028] ksys_ioctl+0x101/0x150 [ 908.643240][ T2028] __x64_sys_ioctl+0x47/0x60 [ 908.647841][ T2028] do_syscall_64+0xc7/0x3b0 [ 908.652433][ T2028] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.658328][ T2028] RIP: 0033:0x45c829 [ 908.662223][ T2028] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.682862][ T2028] RSP: 002b:00007ff8abbeec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.691272][ T2028] RAX: ffffffffffffffda RBX: 00000000004e5500 RCX: 000000000045c829 21:05:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x405}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x180000, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000140)=0xb1fb, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x7f, @remote, 0x4}, @in6={0xa, 0x4e20, 0x10001, @loopback, 0x60}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @empty}], 0x68) [ 908.699245][ T2028] RDX: 00000000200001c0 RSI: 0000000000004b48 RDI: 0000000000000003 [ 908.707215][ T2028] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 908.715236][ T2028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 908.723204][ T2028] R13: 0000000000000329 R14: 00000000004c58dc R15: 00007ff8abbef6d4 [ 908.745147][ T2039] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:19 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:05:19 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) sendto$x25(r0, &(0x7f0000000040)="f5be153b69fa27da823fddb9fac0a96b2aa83a67d662a5bb0e3b3d706a727d67518a8314a542e1f8f7514b5e17e64a23f8c06ed80b8767d3a7adb5dd28377cc7e22ab4eece4ff6b01e04d2671726c94216dbb898458307cb804eaf12d2fa96ae68b078623bcb9dd906b1f7d8299852be5798aa841b10bc38b3e0e139420b89576d", 0x81, 0x84154fb3e638c465, &(0x7f0000000100)={0x9, @remote={[], 0x0}}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$GIO_FONT(r1, 0x4b40, 0x0) 21:05:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 21:05:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x6364, &(0x7f00000001c0)=""/155) 21:05:19 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x121240) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = dup2(r2, r2) bind(r3, &(0x7f0000000180)=@ll, 0x80) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r4, 0x4b4a, &(0x7f00000001c0)=""/155) [ 908.867383][ T2051] FAULT_INJECTION: forcing a failure. [ 908.867383][ T2051] name failslab, interval 1, probability 0, space 0, times 0 [ 908.896726][ T2051] CPU: 0 PID: 2051 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 908.905389][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.915435][ T2051] Call Trace: [ 908.918838][ T2051] dump_stack+0x11d/0x187 [ 908.923173][ T2051] should_fail.cold+0x5/0xf [ 908.927685][ T2051] __should_failslab+0x82/0xb0 [ 908.932463][ T2051] should_failslab+0x5/0xf [ 908.936956][ T2051] kmem_cache_alloc+0x23/0x5e0 [ 908.941726][ T2051] ? __this_cpu_preempt_check+0x3c/0x130 [ 908.947358][ T2051] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 908.953257][ T2051] __anon_vma_prepare+0x5a/0x2a0 [ 908.958206][ T2051] do_huge_pmd_anonymous_page+0xd9f/0x1000 [ 908.964017][ T2051] ? _raw_spin_unlock_irq+0x55/0x80 [ 908.969271][ T2051] ? finish_task_switch+0x7b/0x260 [ 908.974386][ T2051] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 908.980285][ T2051] __handle_mm_fault+0x2d79/0x2ec0 [ 908.980618][ T2060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 908.985419][ T2051] handle_mm_fault+0x21c/0x540 [ 908.985448][ T2051] do_page_fault+0x48a/0xa96 [ 908.985476][ T2051] ? tomoyo_supervisor+0x170/0xc90 [ 908.985502][ T2051] page_fault+0x34/0x40 [ 909.013426][ T2051] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 909.020036][ T2051] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 909.039659][ T2051] RSP: 0018:ffffc9001550fcb0 EFLAGS: 00010202 [ 909.045716][ T2051] RAX: ffff888070ab6a98 RBX: 00000000200001c0 RCX: 0000000000000201 [ 909.053682][ T2051] RDX: 0000000000000201 RSI: 00000000200001c0 RDI: ffff88807090a400 [ 909.061669][ T2051] RBP: 0000000000000201 R08: 0000000000000000 R09: 0000888070ab6c10 [ 909.069646][ T2051] R10: 0000ffffffffffff R11: 0000888070ab6c17 R12: ffff88807090a400 [ 909.077639][ T2051] R13: 00000000200003c1 R14: 00007ffffffff000 R15: 0000000000000000 [ 909.085727][ T2051] _copy_from_user+0x92/0xf0 [ 909.090391][ T2051] vt_do_kdgkb_ioctl+0x95/0x8f0 [ 909.095305][ T2051] ? security_capable+0x8a/0xa0 [ 909.100163][ T2051] ? ns_capable_common+0xad/0xc0 [ 909.105104][ T2051] vt_ioctl+0x39d/0x1d90 [ 909.109352][ T2051] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 909.115252][ T2051] ? complete_change_console+0x1f0/0x1f0 [ 909.120890][ T2051] tty_ioctl+0x8de/0xd80 [ 909.125137][ T2051] ? do_vfs_ioctl+0x3a4/0xd00 [ 909.129862][ T2051] ? tomoyo_file_ioctl+0x30/0x40 [ 909.130622][ T2065] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 909.134871][ T2051] ? tty_vhangup+0x30/0x30 [ 909.134974][ T2051] ksys_ioctl+0x101/0x150 [ 909.152998][ T2051] __x64_sys_ioctl+0x47/0x60 [ 909.157592][ T2051] do_syscall_64+0xc7/0x3b0 [ 909.162106][ T2051] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.167999][ T2051] RIP: 0033:0x45c829 [ 909.172082][ T2051] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.191704][ T2051] RSP: 002b:00007ff8abbeec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.200112][ T2051] RAX: ffffffffffffffda RBX: 00000000004e5500 RCX: 000000000045c829 [ 909.208098][ T2051] RDX: 00000000200001c0 RSI: 0000000000004b48 RDI: 0000000000000003 [ 909.216068][ T2051] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 909.224034][ T2051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 909.232061][ T2051] R13: 0000000000000329 R14: 00000000004c58dc R15: 00007ff8abbef6d4 21:05:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 21:05:19 executing program 4 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:05:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$rose(r2, &(0x7f00000000c0)=""/224, 0xe0, 0x40000002, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f0000000000)=""/169) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=0x0, @ANYBLOB="4f8636e4831622d208000a0014009bf9"], 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)={0x3b0, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x50, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x101}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xf2c1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x48}]}]}, @NL80211_ATTR_IE={0x30a, 0x2a, "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"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x74b65be4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x3b0}, 0x1, 0x0, 0x0, 0xc0}, 0x4001) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000440)={0x0, 0x3ff, 0x7ff, 0xca, 0x1, [0x10000000, 0x4, 0x400, 0xa934], [0x3, 0x0, 0x80, 0x92], [0x5cc, 0x1, 0xff, 0x1], [0xfffe00, 0x3, 0x8, 0x9]}) [ 909.404877][ T2083] FAULT_INJECTION: forcing a failure. [ 909.404877][ T2083] name failslab, interval 1, probability 0, space 0, times 0 [ 909.426255][ T2085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 909.434029][ T2083] CPU: 0 PID: 2083 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 909.444206][ T2083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.454261][ T2083] Call Trace: [ 909.457596][ T2083] dump_stack+0x11d/0x187 [ 909.461931][ T2083] should_fail.cold+0x5/0xf [ 909.466447][ T2083] __should_failslab+0x82/0xb0 [ 909.471225][ T2083] should_failslab+0x5/0xf [ 909.475649][ T2083] kmem_cache_alloc+0x23/0x5e0 [ 909.480444][ T2083] ? __this_cpu_preempt_check+0x3c/0x130 [ 909.486162][ T2083] ? anon_vma_compatible+0x51/0x180 [ 909.491373][ T2083] __anon_vma_prepare+0x179/0x2a0 [ 909.496422][ T2083] do_huge_pmd_anonymous_page+0xd9f/0x1000 [ 909.502239][ T2083] ? _raw_spin_unlock_irq+0x55/0x80 [ 909.507438][ T2083] ? finish_task_switch+0x7b/0x260 [ 909.512551][ T2083] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 909.518468][ T2083] __handle_mm_fault+0x2d79/0x2ec0 [ 909.523689][ T2083] handle_mm_fault+0x21c/0x540 [ 909.528532][ T2083] do_page_fault+0x48a/0xa96 [ 909.533185][ T2083] ? tomoyo_supervisor+0x170/0xc90 [ 909.538358][ T2083] page_fault+0x34/0x40 [ 909.542515][ T2083] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 909.549178][ T2083] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 909.568786][ T2083] RSP: 0018:ffffc900156b7cb0 EFLAGS: 00010202 [ 909.574878][ T2083] RAX: ffff888070b80a18 RBX: 00000000200001c0 RCX: 0000000000000201 [ 909.582905][ T2083] RDX: 0000000000000201 RSI: 00000000200001c0 RDI: ffff8880709eec00 [ 909.583776][ T2093] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 909.590880][ T2083] RBP: 0000000000000201 R08: 0000000000000000 R09: 0000888070b80b90 [ 909.590903][ T2083] R10: 0000ffffffffffff R11: 0000888070b80b97 R12: ffff8880709eec00 [ 909.616096][ T2083] R13: 00000000200003c1 R14: 00007ffffffff000 R15: 0000000000000000 [ 909.624091][ T2083] _copy_from_user+0x92/0xf0 [ 909.628688][ T2083] vt_do_kdgkb_ioctl+0x95/0x8f0 [ 909.633547][ T2083] ? security_capable+0x8a/0xa0 [ 909.638409][ T2083] ? ns_capable_common+0xad/0xc0 [ 909.643395][ T2083] vt_ioctl+0x39d/0x1d90 [ 909.647732][ T2083] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 909.653668][ T2083] ? complete_change_console+0x1f0/0x1f0 [ 909.659310][ T2083] tty_ioctl+0x8de/0xd80 [ 909.663604][ T2083] ? do_vfs_ioctl+0x3a4/0xd00 [ 909.668426][ T2083] ? tomoyo_file_ioctl+0x30/0x40 [ 909.673392][ T2083] ? tty_vhangup+0x30/0x30 [ 909.677830][ T2083] ksys_ioctl+0x101/0x150 [ 909.682171][ T2083] __x64_sys_ioctl+0x47/0x60 [ 909.686770][ T2083] do_syscall_64+0xc7/0x3b0 [ 909.691283][ T2083] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.697174][ T2083] RIP: 0033:0x45c829 [ 909.701127][ T2083] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.720804][ T2083] RSP: 002b:00007ff8abbeec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.729231][ T2083] RAX: ffffffffffffffda RBX: 00000000004e5500 RCX: 000000000045c829 [ 909.737201][ T2083] RDX: 00000000200001c0 RSI: 0000000000004b48 RDI: 0000000000000003 [ 909.745303][ T2083] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 909.753306][ T2083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 909.761273][ T2083] R13: 0000000000000329 R14: 00000000004c58dc R15: 00007ff8abbef6d4 21:05:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000040)={0x5, [[0x3, 0x2, 0x8, 0x2, 0x5, 0x5, 0xfffff703, 0x20], [0x6, 0x20, 0x2, 0x8001, 0x9, 0x3ffc, 0x4, 0x7fff], [0x5, 0x4403, 0x1000, 0x0, 0x8000, 0x264, 0xaec, 0xfffffff9]], [], [{0x4, 0x5, 0x0, 0x1}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x1}, {0x1ff, 0xfffffffd, 0x1}, {0x3f, 0x10001, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x4b67b553, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x1}, {0x6c5d, 0x8}], [], 0x4}) lseek(r1, 0x2, 0x1) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x2, 0x9}) 21:05:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x6, 0xc, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0xc, 0x1, 0x4, 0x6, 0x7f, "03952be6"}, 0xfffffff7, 0x1, @planes=&(0x7f0000000100)={0x4, 0x0, @fd, 0x7f}, 0x3, 0x0, r6}) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000340)=""/230, 0x20000426) lseek(r7, 0x2, 0x1) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000340)=""/230, 0x20000426) lseek(r8, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x5) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000000)) 21:05:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8912, &(0x7f00000001c0)=""/155) 21:05:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0xc, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040821}, 0x20040000) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 21:05:20 executing program 4 (fault-call:1 fault-nth:5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) [ 909.997262][ T2104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 910.017101][ T2109] FAULT_INJECTION: forcing a failure. [ 910.017101][ T2109] name failslab, interval 1, probability 0, space 0, times 0 [ 910.053491][ T2109] CPU: 0 PID: 2109 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 910.062137][ T2109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.072187][ T2109] Call Trace: [ 910.075560][ T2109] dump_stack+0x11d/0x187 [ 910.079893][ T2109] should_fail.cold+0x5/0xf [ 910.084412][ T2109] __should_failslab+0x82/0xb0 [ 910.089185][ T2109] should_failslab+0x5/0xf [ 910.093600][ T2109] kmem_cache_alloc+0x23/0x5e0 [ 910.098366][ T2109] ? anon_vma_chain_link+0xe1/0x110 [ 910.103615][ T2109] __khugepaged_enter+0x5e/0x2c0 [ 910.108562][ T2109] do_huge_pmd_anonymous_page+0xafb/0x1000 [ 910.114379][ T2109] ? process_measurement+0x12a/0x1000 [ 910.119777][ T2109] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 910.125677][ T2109] __handle_mm_fault+0x2d79/0x2ec0 [ 910.130918][ T2109] handle_mm_fault+0x21c/0x540 [ 910.135695][ T2109] do_page_fault+0x48a/0xa96 [ 910.140377][ T2109] ? tomoyo_supervisor+0x170/0xc90 [ 910.145503][ T2109] page_fault+0x34/0x40 [ 910.149734][ T2109] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 910.156328][ T2109] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 910.176017][ T2109] RSP: 0018:ffffc9001573fcb0 EFLAGS: 00010202 [ 910.182167][ T2109] RAX: ffff88808b708a98 RBX: 00000000200001c0 RCX: 0000000000000201 [ 910.190133][ T2109] RDX: 0000000000000201 RSI: 00000000200001c0 RDI: ffff8880709eec00 [ 910.198102][ T2109] RBP: 0000000000000201 R08: 0000000000000000 R09: 000088808b708c10 [ 910.206070][ T2109] R10: 0000ffffffffffff R11: 000088808b708c17 R12: ffff8880709eec00 [ 910.214055][ T2109] R13: 00000000200003c1 R14: 00007ffffffff000 R15: 0000000000000000 [ 910.222049][ T2109] _copy_from_user+0x92/0xf0 [ 910.226643][ T2109] vt_do_kdgkb_ioctl+0x95/0x8f0 [ 910.231495][ T2109] ? security_capable+0x8a/0xa0 [ 910.236387][ T2109] ? ns_capable_common+0xad/0xc0 [ 910.241336][ T2109] vt_ioctl+0x39d/0x1d90 [ 910.245597][ T2109] ? __sanitizer_cov_trace_switch+0x45/0x70 21:05:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x240800, 0x0) write$midi(r0, &(0x7f0000000040)="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", 0x1000) [ 910.251496][ T2109] ? complete_change_console+0x1f0/0x1f0 [ 910.257140][ T2109] tty_ioctl+0x8de/0xd80 [ 910.261406][ T2109] ? do_vfs_ioctl+0x3a4/0xd00 [ 910.266166][ T2109] ? tomoyo_file_ioctl+0x30/0x40 [ 910.271113][ T2109] ? tty_vhangup+0x30/0x30 [ 910.275537][ T2109] ksys_ioctl+0x101/0x150 [ 910.279419][ T2110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 910.279903][ T2109] __x64_sys_ioctl+0x47/0x60 [ 910.293763][ T2109] do_syscall_64+0xc7/0x3b0 [ 910.298287][ T2109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 21:05:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 21:05:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 21:05:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8933, &(0x7f00000001c0)=""/155) [ 910.304177][ T2109] RIP: 0033:0x45c829 [ 910.308075][ T2109] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.327807][ T2109] RSP: 002b:00007ff8abbeec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.336217][ T2109] RAX: ffffffffffffffda RBX: 00000000004e5500 RCX: 000000000045c829 [ 910.344186][ T2109] RDX: 00000000200001c0 RSI: 0000000000004b48 RDI: 0000000000000003 21:05:20 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_FONT(r2, 0x4b40, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x11) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040)) [ 910.352284][ T2109] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 910.352295][ T2109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 910.352326][ T2109] R13: 0000000000000329 R14: 00000000004c58dc R15: 00007ff8abbef6d4 21:05:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x400454ca, &(0x7f00000001c0)=""/155) [ 910.466132][ T2127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x94ac8654b68e7745, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008d1) 21:05:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40049409, &(0x7f00000001c0)=""/155) 21:05:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xa00000, 0xfd1, 0x69, r0, 0x0, &(0x7f0000000040)={0x9b0962, 0x429, [], @p_u8=&(0x7f0000000000)=0x5}}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) [ 910.596356][ T2127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:05:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 21:05:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40186366, &(0x7f00000001c0)=""/155) 21:05:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 21:05:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb5) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b40, 0x0) 21:05:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000280)={r6, 0x1, 0x9, "fcda3e1a6e4f164f1b5d86d16547654736ab75f5703f0332918ed183b37252263191342f5ec3c70f22456f0a0f2a7bb57643d5d8b5e16214f0d19e796d4cadc358ffa6ad85b009d485633601a35d99c97ff9f1c3f44751b1aa781b83e98d4eb2e09098f4b719ac7e16562c58896d4c32df89d56739fd94ff89923468bcfccf7910dc8f8fd22adef3"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r7, 0x6}, 0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x4, 0x70bd26, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$GIO_FONT(r8, 0x4b68, 0x0) 21:05:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x97, 0x2, 0xd7, "31314d3541c85654d6a96cac6c38611a", "a05204bfb2d6ff3b0ccf28d7034bdb62155318f8f8ba519e1f9af0fa60a557bd3b15f14d043f3332f08685fc8cfb9fdca1da510f8ceda9e95f0d155910e85c9dac1c3c0170023415eae37a5d151c5bc9fb216a09f4bdedef18c1d3d0a9ee47dbf40ed58a91ddbd406c3d07e8af5d80751b9beace0c0af15e9424b9b858f475acea61"}, 0x97, 0x2) 21:05:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4018ae50, &(0x7f00000001c0)=""/155) 21:05:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 21:05:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x2, &(0x7f00000001c0)=""/155) 21:05:21 executing program 1: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x109, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="03070006000000fdff001700000004000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x2e8, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1ac, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb129d3bf4be5d31c}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x4) lseek(r0, 0x2, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='vegas\x00', 0x0, r0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000001c0)={{0x2, 0x0, @identifier="ac2fe8fbdce0c09f1a251737eef0b9c3"}}) 21:05:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB="1419a6a7222500000000c4dc0ecabfd1"], 0x28}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10000010) 21:05:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4020940d, &(0x7f00000001c0)=""/155) 21:05:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x10, &(0x7f00000001c0)=""/155) 21:05:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 21:05:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x1278, &(0x7f00000001c0)=""/155) 21:05:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xf, 0x6, 0xc02, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x44}}, 0x40000) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80045432, &(0x7f00000001c0)=""/155) 21:05:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000340)=""/230, 0x20000426) lseek(r7, 0x2, 0x1) statx(r7, &(0x7f00000000c0)='./file0\x00', 0x100, 0xfff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, 0x0, 0x0) sendmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x20}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010005000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000700", @ANYRES32=r6, @ANYBLOB="040004000000000008000000", @ANYRES32=r8, @ANYBLOB="0800026a", @ANYRES32=r10, @ANYBLOB="10000500000000002000000000000000"], 0x5c, 0x2) 21:05:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setresgid(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0xffffffffffffff3c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r6, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=0x0, @ANYBLOB="c5000000", @ANYRES32=0x0, @ANYBLOB="02100000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="0223647fb49b583cdfc2ab8f31b61a05df725b70f54b66eb1b7f4afd66f87e5260f61d50f1483c63847f3a3fe233a54a1251c858f6ec91792eb1eed1b4a0067aacd54a4d9f14a7cc815e8f85d3fed71e71dd16b234cd3566629dd6eff6651143c45a4878956f83e3222e6828b6d0a0b57970fc59050868369003ab8ceeae691d64a9ad1a437dc7d343b5cf100000000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRESOCT, @ANYBLOB="04000000", @ANYRES32=0x0, @ANYBLOB="040006008dbe4e5b753e59b5b653440f000000000800030040569bc381aa3d193da8c87c0ac979aa896a714498bd939831ba5073f1e36df1954c7a98808a68478d20e5bf96320b4397c5e03d8e3666b6c4b52a4c92313b1b5a5b2bf4831f7e15b2f1ff91cc79a055917e62b59a3e441904d2732327e2106bdfff01ce12381ee18df76da3346941dd46ad7d025028d74e71acc97047e5e4cfb4c22fecbdf63bf6560a31b5304829d12a00"/184, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRESDEC, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="9711b6f8946798f1619e367a31062129889e32cd0a88e775e9f9132c047be10fd537cf5b9dcc865b29d1d3edea1922bc8d059510a073b76d3c5dcc19ee394c709cad8e246940c3f82d7f4f36b9f0cace5cabe36cbbeea0cd74d814689b2388d9f75032a27e723cf358", @ANYRES32, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYPTR64, @ANYPTR, @ANYBLOB="6d72e0ebc0b58f6ac2a134c11fc9b52c5e2a176894911664d2d041bdabff45487608fdff8687a0845d81c38a17e5a9e8365e095a24edc8861784fc39c89d66da29c923630612a52d438dfce5bbb6642070e0941fec75f5ac77f2af6b85214922184cb6bdeff4788d121d5136e2b27da0912b4f93c58c404b6337df8217733cd1c7d7b148773fa4df10d0ddff1fd1898fe7e68a02dd3bcf250b1b79aa41779c980f522b694884f221141d3a35bd61941fb9e7a54df9869878654e3b650f27393e3c65aa887fa16bd7ced82b464b0d9567f9cee0c81d646ddff90b17cc024abf7f9e26fe3298534e0c801e", @ANYRES64, @ANYBLOB="591ad965349b8358d73a09fac68a5b613b321403e658c1b8649e96cb5224ccd42f2bb6f560b172bf24cf04d2ec3704fe6c813983fe6eed77885affa28dcf2b6a6938ab96326325443f93105983857cb2b2c063ff61cf149246c99d0fcbb04b71869ff400789261c0291bb9b939c8ff6876d8327226f97f9481f9", @ANYRES64], @ANYRESHEX=r3, @ANYRES64], @ANYRES16, @ANYBLOB="0000d0fe", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="100002000000000020000e0000000000"], 0x23, 0xd02bf0e3b116e678) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) fallocate(r9, 0x0, 0x0, 0x2) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0xfffffffd, 0x6, 0x7, 0x1, 0x19, "9d346fc7413f0448818f36aa68d0ceb65ea7a9"}) 21:05:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x2282, &(0x7f00000001c0)=""/155) 21:05:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 21:05:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONT(r1, 0x4b68, 0x0) 21:05:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80045440, &(0x7f00000001c0)=""/155) 21:05:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSBRK(r0, 0x5427) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x2405, &(0x7f00000001c0)=""/155) 21:05:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000007000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000009000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/233) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80086301, &(0x7f00000001c0)=""/155) 21:05:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000080)) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b2f, &(0x7f00000001c0)=""/155) 21:05:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 21:05:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8007, 0x5, 0x43, &(0x7f0000000280)="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"}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8) ftruncate(r2, 0x8c84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80200, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000680)=""/237, 0xed) lseek(r3, 0x2, 0x1) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f00000000c0)={0x2, 0x9, 0x6, 0x7ff, 0x2, 0x6ae1}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/159}) 21:05:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0045878, &(0x7f00000001c0)=""/155) 21:05:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f00000001c0)={0x4, 0x5, 0x5, 0x8, 0x8}) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/210, 0xd2}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000480)=""/126, 0x7e}], 0x4, &(0x7f0000000340)=""/36, 0x24}, 0x2064) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 21:05:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b30, &(0x7f00000001c0)=""/155) 21:05:22 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/148) 21:05:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 21:05:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0045878, &(0x7f00000001c0)=""/155) 21:05:23 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f0000000180)=""/145, 0x91}], 0x2}, 0x80000060) 21:05:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:05:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b31, &(0x7f00000001c0)=""/155) 21:05:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x2, 0x0, @descriptor="23f6edff3024a98c"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000000)) socket(0x15, 0x2, 0x7fff) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xff, @private2, 0xfe}}, 0x4, 0x0, 0xfffffffd, 0xf669, 0x0, 0x8001, 0xe1}, &(0x7f0000000080)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={r7, @in={{0x2, 0x4e23, @multicast1}}, 0x5, 0x6}, 0x90) 21:05:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0189436, &(0x7f00000001c0)=""/155) 21:05:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:05:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 21:05:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) sync_file_range(r0, 0x10001, 0x0, 0x0) 21:05:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b32, &(0x7f00000001c0)=""/155) 21:05:23 executing program 3: io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_pgetevents(r0, 0x7, 0x6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) io_pgetevents(r0, 0x7ff, 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f00000001c0)=""/155) 21:05:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc018aa3f, &(0x7f00000001c0)=""/155) 21:05:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) 21:05:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b33, &(0x7f00000001c0)=""/155) 21:05:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$can_j1939(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, r6, 0x0, {0x0, 0xff, 0x1}, 0xfd}, 0x18, &(0x7f0000000080)={&(0x7f0000000040)="b6750c8a6aab2e3cdb46f8", 0xb}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) 21:05:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 21:05:23 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f0000000000)=""/155) 21:05:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc020660b, &(0x7f00000001c0)=""/155) [ 913.420825][ T2351] batman_adv: batadv0: Adding interface: veth263 [ 913.441783][ T2351] batman_adv: batadv0: The MTU of interface veth263 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:05:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b34, &(0x7f00000001c0)=""/155) 21:05:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB="1419a6a7222500000000c4dc0ecabfd1"], 0x28}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10000010) [ 913.541545][ T2351] batman_adv: batadv0: Not using interface veth263 (retrying later): interface not active 21:05:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/155) [ 913.667251][ T2364] __nla_validate_parse: 19 callbacks suppressed [ 913.667262][ T2364] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b35, &(0x7f00000001c0)=""/155) 21:05:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = dup2(0xffffffffffffffff, r0) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f0000000100)=""/164) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000000)={0xc3e0, 0x2, 0xe59, 0x6, 0x7, "72896973e0e11563"}) [ 913.738586][ T2367] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 913.807361][ T2358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.853785][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400400, 0x0) ioctl$KDDISABIO(r2, 0x4b37) r3 = dup(r1) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000080), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x3) 21:05:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 21:05:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b36, &(0x7f00000001c0)=""/155) 21:05:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, 0x3}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 21:05:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0xfff, 0x0, 0x1, 0x3, 0x10000, 0x2000000, 0x7fff, 0x81, 0x6, 0x1, 0x433, 0x3, 0x2, 0x3, 0xc, 0x13, {0x7fff, 0x2}, 0x8, 0x60}}) [ 914.067783][ T2387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b37, &(0x7f00000001c0)=""/155) 21:05:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) [ 914.233311][ T2399] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$inet6(r1, &(0x7f0000000780)={&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000040)="633c8ac4a60c1d42de809f511ff4dbcb00af5e1334fc2fb688bb69236551b63ca5656b99c2ef7ec6877aa3b0bbf425e65a5984f52e0d1bd57025fea75f1acbe60efe2fc2074c33dcec89933898f10da3d023e67edb61", 0x56}, {&(0x7f00000000c0)="2e6488ce5cfd4b41178e6a11ec5ace09f476a979b28a78ff0fe1d70c845e5e1371bc906120267d1cac8f6fbad8dbdd2f13661937f4d53e73626cdee7e940faa6e624f96d3938e654917f5f1520ed03c272e16a2330a687ed", 0x58}, {&(0x7f0000000280)="448b751175a91bb218b0b5713af09104d9086afdd3f437d6338079bbde3256c39551311c7be3fb595da11b6c6c6709d4dc178a793fe14ce60dd810da3a8adf11bc1459772dc81da207fac3ab96ca407bf79f747b0ce771c6e3c3740f83fc8a9e7a526bd62b2daf43b36b13b5727802d44297a202bf21a5bf7854653d28711d955a9a07bfb13e6e95e49b7439630ad1c93285", 0x92}, {&(0x7f0000000140)="356adc97d2c13844ab17767daf6978084278eb27652fa5b6ef5ce817abd625fe2a72f8b7012f122f2885d840954acb732abc81eb45eefab418f56a0cafbd8809a0208f7c5df1b127343c9ef2b003bf", 0x4f}, {&(0x7f0000000340)="618f365e7b68cc44b44617d4b379c42b93873a6fe2528d7ec01152e85ce7b0e2e1e51f7996d1bc0c683c8b87123c7b3ed725173f450608b17e41dd16a688e036da3a793b7667552170f553a9b296f6f7ba4e28ada907dea6596227df7de18a2490c5a7e103dad130751ca7f78d4bffdeac4deedbbd7a31d5435c26383a49e221c06004fed5d2c2294129b236122d0190cbc0584eb5892674451016c973128303db0411e0b717ee6701b4ba100f2e880976b5e1787e5056c992ec423e09d74fde6c7d95282575cf6fbe839af147f8a89498df03312f55", 0xd6}, {&(0x7f0000000440)="e446615ee0684dd84a6e3ed5779ac148c8be5cd24517da7776102b4953380e247727842dae084780a94844ffaf57f743ea268cf049587e6e539dd92e9f4e4a1f15c4922de1de4df9f08586b0f9e1f78fad6c21f2515d5a5c93709879a6b39418ed9aea9a84f80c9ff74b945bf296786c561dbb45b9eefa6ece10b7afd8d3340959364d5098baf064f3860e023b873ebb", 0x90}, {&(0x7f0000000500)="a2efc3f448c06c2fcf3fb063740191b96c3766b2f75c025f16ad0b35ae4cc7230b2f80b85541dabfdc0829", 0x2b}, {&(0x7f0000000540)="5bcfb2f5285aed6cdbc4bb1c92fa515c9a9008545e6910b315eb1b41f60024150d313dd84b2b1071798d0f4991d2c03161be4bf14916c22ff1a4ab21006eea10ef711d74a8ec4703f2b8a3a857e84527874920808527c62cafab664694301ce2d07e0d11b4acbf13ea4a8f54250141a970a1d36318e5de526a8188aac6ce74f3539f9533c143a5d482438f1dfb3761cbece991", 0x93}], 0x8, &(0x7f0000000680)=[@dstopts={{0x80, 0x29, 0x37, {0x0, 0xc, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x2, [0x1e, 0x3b4a, 0x3ff, 0x1, 0x1f]}}, @ra, @hao={0xc9, 0x10, @private0}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2e, 0x8, 0x0, 0x8, 0x0, [@private0, @mcast2, @mcast2, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x489}}], 0xf0}, 0x4b844) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b40, &(0x7f00000001c0)=""/155) [ 914.307947][ T2396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3a, &(0x7f00000001c0)=""/155) 21:05:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 21:05:24 executing program 1 (fault-call:13 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='./file1\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) ioctl$GIO_FONT(r1, 0x4b4a, &(0x7f00000000c0)=""/167) 21:05:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3b, &(0x7f00000001c0)=""/155) 21:05:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000140)={r3, &(0x7f00000000c0)=""/102}) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x5c}) [ 914.620861][ T2430] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000040)={0x1, 0x1, 0x8}) alarm(0x40) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000080)={0x2d, 0x44, &(0x7f0000000100)="8026a2cfc92b5df9617177cf2b0c4466733129891b4a9182456be8eb5ece9c8753b9c411fb522a06c650822702e00bb902bc3b58986cf2ee1fc651905cc486bf7fe40860d2ccf6f09cd59569e2eb6574821644d0ce23d4fc051d761043", {0x6, 0xfffffff8, 0x50323234, 0x2, 0x3f000000, 0x0, 0x0, 0x7}}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) [ 914.782424][ T2443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 21:05:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) 21:05:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10000001) getpriority(0x1, r1) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0xe1034a) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x40088d0) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3c, &(0x7f00000001c0)=""/155) 21:05:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_open_pts(0xffffffffffffffff, 0x800) ioctl$GIO_FONT(r2, 0x4b40, &(0x7f00000001c0)=""/155) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x3ff, 0x6, 0x6f, 0x8}, 0x10) [ 915.078348][ T2465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3d, &(0x7f00000001c0)=""/155) 21:05:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r6, 0x5, 0x0, 0x2}, 0x10) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) r7 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x406500) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) rt_sigreturn() [ 915.443022][ T2431] FAULT_INJECTION: forcing a failure. [ 915.443022][ T2431] name fail_futex, interval 1, probability 0, space 0, times 1 [ 915.471397][ T2431] CPU: 0 PID: 2431 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 915.479994][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.490042][ T2431] Call Trace: [ 915.493383][ T2431] dump_stack+0x11d/0x187 [ 915.497715][ T2431] should_fail.cold+0x5/0xf [ 915.502266][ T2431] get_futex_key+0x5cc/0xa30 [ 915.506867][ T2431] futex_wake+0xbd/0x340 [ 915.511126][ T2431] do_futex+0x2b3/0x15b0 [ 915.511154][ T2431] ? cpumask_next_and+0x39/0x40 [ 915.520325][ T2431] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 915.520383][ T2431] ? __read_once_size+0x2f/0xd0 [ 915.531108][ T2431] ? futex_cleanup+0xb3/0x940 [ 915.535820][ T2431] mm_release+0x1e5/0x200 [ 915.535846][ T2431] exit_mm_release+0x2b/0x40 [ 915.544735][ T2431] do_exit+0x433/0x1150 [ 915.544762][ T2431] ? tlb_finish_mmu+0xdc/0x230 [ 915.553687][ T2431] do_group_exit+0xae/0x1a0 [ 915.558202][ T2431] ? __read_once_size+0xb7/0x100 [ 915.563144][ T2431] get_signal+0x2a7/0x1290 [ 915.567566][ T2431] ? up_read+0x42/0x90 [ 915.571680][ T2431] do_signal+0x2b/0x840 [ 915.575935][ T2431] ? mutex_unlock+0x22/0x40 [ 915.580454][ T2431] exit_to_usermode_loop+0x24a/0x2c0 [ 915.585795][ T2431] do_syscall_64+0x38b/0x3b0 [ 915.590388][ T2431] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.596272][ T2431] RIP: 0033:0x45c829 [ 915.600218][ T2431] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.619815][ T2431] RSP: 002b:00007f9d64b99c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 915.628222][ T2431] RAX: 0000000000000000 RBX: 00000000004f54c0 RCX: 000000000045c829 [ 915.636187][ T2431] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000000020000000 [ 915.644170][ T2431] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 915.652137][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 915.660106][ T2431] R13: 0000000000000728 R14: 00000000004c9eea R15: 00007f9d64b9a6d4 21:05:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:26 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)={0x3ff, 0x7, 0x4, 0x20, 0x6a, {0x77359400}, {0x2, 0x2, 0x1, 0x69, 0x0, 0x45, "aaacf774"}, 0x5, 0x4, @fd, 0x6, 0x0, 0xffffffffffffffff}) ioctl$GIO_FONT(r4, 0x4b40, &(0x7f0000000000)=""/165) 21:05:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 21:05:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="be0000000000000000000c000000e22a72b8e80c000580070001bf4d6e2ed6071f0eaf09298f7387dd98000000000000000000e5"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x2ec, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd60}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x783c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7db}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff339}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9138}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x84}, 0x8001) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) 21:05:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x1ff, 0x8, 0x100, 0x3}, 0x14) 21:05:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b41, &(0x7f00000001c0)=""/155) 21:05:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 21:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) connect$netrom(r1, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) 21:05:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000100)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/155) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000600000008000300c83461e7ed6b59fdd990e28aa247ee42284db7fd958aec25575382dea14e87104e7d71c39403ac60b6ec539837922ebd2ccfeb326d0123e64c5e04becf70f050fa1dd6b58955252449dbc9d293707e70ecb3b8beefef", @ANYRES32=r5, @ANYBLOB="414a891414a88efe6ad25975e54821ee4c2f6369ad5ee805d942e83b08d8dcad660e70e4fbdf6959f9612cb5da12f60cd1d892185e7c05781112b812a3672b3b3825fee29f0a747e4847b63d4e152f00000000000018c31956cde8d9765677b410bd5f15970e0215f9fcbeb21896bbfb0550d3dbbfd4d5311fb1e2f00cc6088b398ca030f63d21d4dd55b72b903cfdd35458c768756fee500be20ae73c639b8f14dcb8913d9557cd6efcf6e2639dcd22576723e2d5a17ca97d9773c0cf1c222fd50cac52f55d7841511a0dcf96b611fe6d52bb54c16a23f90682905c7eacbbc8555d6f05a5423fbcc4328b6df6"], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0xe97f1cabd1c24fbe, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 21:05:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b44, &(0x7f00000001c0)=""/155) 21:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10000001) getpriority(0x1, r1) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0xe1034a) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x40088d0) ioctl$GIO_FONT(r0, 0x4b68, 0x0) [ 916.201649][ T2511] batman_adv: batadv0: Adding interface: veth25 [ 916.224694][ T2511] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.280954][ T2511] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active 21:05:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b45, &(0x7f00000001c0)=""/155) 21:05:27 executing program 0: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/229, 0xe5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lseek(r0, 0x2, 0x1) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0x3, 0x41, &(0x7f0000000000)="51fd2b2592450fbb18e2b3c40868f1524fbb15587c12e733765de7addbcc0857dd5208b0781e531d4f43907927d10575061063ecfc2e01722f39daf28a2c18237a8ffca855251b23a5031815ad52c516dd01b243583d948be70c3ebc3124d602d1ecf93d1daf2b79446317e5afee1116a090eb8c42854a0e6b245f27abbb405795f11b975c78285d6a01f786986ca3db96c249e2a2379c", {0x80, 0x2, 0xb5315241, 0x7, 0x2, 0x6, 0xa, 0xc60}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r3, 0x4b68, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0xca01, 0xe0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyS3\x00', 0x52000, 0x0) lseek(r4, 0x2, 0x1) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000540)={0x210008, 0x0, 0x2, 0x2b, 0x3, 0x7e}) getsockopt(r4, 0xffff1049, 0x5b57, &(0x7f0000000100)=""/197, &(0x7f0000000200)=0xc5) 21:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 21:05:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 21:05:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000000)="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") ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:27 executing program 3 (fault-call:2 fault-nth:0): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:27 executing program 5: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x220000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x1, 0x8001}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x401) 21:05:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) [ 917.027106][ T2559] FAULT_INJECTION: forcing a failure. [ 917.027106][ T2559] name failslab, interval 1, probability 0, space 0, times 0 21:05:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b46, &(0x7f00000001c0)=""/155) [ 917.095131][ T2559] CPU: 0 PID: 2559 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 917.103730][ T2559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.113782][ T2559] Call Trace: [ 917.117084][ T2559] dump_stack+0x11d/0x187 [ 917.121425][ T2559] should_fail.cold+0x5/0xf [ 917.125940][ T2559] __should_failslab+0x82/0xb0 [ 917.130748][ T2559] should_failslab+0x5/0xf [ 917.135165][ T2559] __kmalloc+0x54/0x640 [ 917.139408][ T2559] ? __x64_sys_memfd_create+0xda/0x370 [ 917.144932][ T2559] ? strnlen_user+0x1a8/0x220 [ 917.149681][ T2559] __x64_sys_memfd_create+0xda/0x370 [ 917.154969][ T2559] ? debug_smp_processor_id+0x3f/0x129 [ 917.160433][ T2559] do_syscall_64+0xc7/0x3b0 [ 917.164941][ T2559] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 917.170835][ T2559] RIP: 0033:0x45c829 [ 917.174741][ T2559] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.194347][ T2559] RSP: 002b:00007fe1c7788a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 917.194365][ T2559] RAX: ffffffffffffffda RBX: 0000000000508240 RCX: 000000000045c829 [ 917.194375][ T2559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1991 [ 917.194386][ T2559] RBP: 000000000078bf00 R08: 0000000002aa482e R09: 0000000000000001 [ 917.194464][ T2559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 917.234796][ T2559] R13: 0000000000000bde R14: 00000000004cdfbd R15: 00007fe1c77896d4 21:05:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 21:05:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) 21:05:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b47, &(0x7f00000001c0)=""/155) 21:05:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000000)=""/95) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00') 21:05:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) 21:05:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b49, &(0x7f00000001c0)=""/155) 21:05:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 21:05:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x1, r2}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000000)={0x1f, 0x0, 'client0\x00', 0x7, "31091c922d663a23", "b42a869bc8e4dc03144e618d280563efa7276e964b07b8fb3d63b73d7dac2027", 0xffff8040, 0xfffffffd}) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:28 executing program 3 (fault-call:2 fault-nth:1): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, &(0x7f00000001c0)=""/155) [ 918.185926][ T2624] FAULT_INJECTION: forcing a failure. [ 918.185926][ T2624] name failslab, interval 1, probability 0, space 0, times 0 [ 918.285335][ T2624] CPU: 0 PID: 2624 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 918.293949][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.303995][ T2624] Call Trace: [ 918.307316][ T2624] dump_stack+0x11d/0x187 [ 918.311653][ T2624] should_fail.cold+0x5/0xf [ 918.316161][ T2624] __should_failslab+0x82/0xb0 [ 918.320928][ T2624] should_failslab+0x5/0xf [ 918.325421][ T2624] kmem_cache_alloc+0x23/0x5e0 [ 918.330252][ T2624] ? proc_cwd_link+0x160/0x160 21:05:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/152) [ 918.335089][ T2624] ? _kstrtoull+0xfc/0x130 [ 918.339510][ T2624] ? shmem_destroy_inode+0x60/0x60 [ 918.344642][ T2624] shmem_alloc_inode+0x2e/0x60 [ 918.349404][ T2624] ? shmem_destroy_inode+0x60/0x60 [ 918.354517][ T2624] alloc_inode+0x42/0x130 [ 918.358851][ T2624] new_inode_pseudo+0x32/0xe0 [ 918.363540][ T2624] ? proc_cwd_link+0x160/0x160 [ 918.368313][ T2624] new_inode+0x25/0x50 [ 918.372382][ T2624] shmem_get_inode+0x85/0x490 [ 918.377072][ T2624] __shmem_file_setup.part.0+0x6e/0x1e0 [ 918.382687][ T2624] shmem_file_setup+0x77/0xa0 [ 918.387372][ T2624] __x64_sys_memfd_create+0x205/0x370 [ 918.392850][ T2624] ? debug_smp_processor_id+0x3f/0x129 [ 918.398323][ T2624] do_syscall_64+0xc7/0x3b0 [ 918.402888][ T2624] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 918.408802][ T2624] RIP: 0033:0x45c829 [ 918.412701][ T2624] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:05:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) [ 918.432302][ T2624] RSP: 002b:00007fe1c7788a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 918.440711][ T2624] RAX: ffffffffffffffda RBX: 0000000000508240 RCX: 000000000045c829 [ 918.448679][ T2624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1991 [ 918.456648][ T2624] RBP: 000000000078bf00 R08: 0000000002aa482e R09: 0000000000000001 [ 918.464679][ T2624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 918.472643][ T2624] R13: 0000000000000bde R14: 00000000004cdfbd R15: 00007fe1c77896d4 21:05:28 executing program 0: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x620, 0x9, 0x1005, 0x5, 0x7, 0x4, 0x2, 0x6}}) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4b, &(0x7f00000001c0)=""/155) 21:05:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3) [ 918.756571][ T2656] __nla_validate_parse: 14 callbacks suppressed [ 918.756596][ T2656] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 21:05:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r3) 21:05:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4c, &(0x7f00000001c0)=""/155) 21:05:29 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x13000000}, 0x0) 21:05:29 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 919.208458][ T2682] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x400, 0x208, 0x108, 0x108, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9c40ba21d4c6d65aabb5c44ffddf8772b700bd64b6cd0dfacc664a408c6f"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local, @multicast2, @empty}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x450) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r4, 0x4b40, &(0x7f00000000c0)=""/158) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) bind$isdn_base(r5, &(0x7f0000000180)={0x22, 0x92, 0x0, 0x1f, 0x20}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000340)=""/230, 0x20000426) lseek(r8, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7d8c, 0x1, [0xba42]}, &(0x7f0000000040)=0xa) 21:05:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4d, &(0x7f00000001c0)=""/155) [ 919.340962][ T2678] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 919.406674][ T2697] x_tables: duplicate underflow at hook 1 [ 919.415344][ T2691] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(0xffffffffffffffff, 0x3, 0x4) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0x88, 0x6, 0xc437, 0x7}) [ 919.450272][ T2704] x_tables: duplicate underflow at hook 1 21:05:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4e, &(0x7f00000001c0)=""/155) 21:05:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x0) 21:05:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0x470ebae0, &(0x7f0000000240)}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b40, &(0x7f0000000100)=""/178) [ 919.670966][ T2715] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 919.800100][ T2718] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:30 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b52, &(0x7f00000001c0)=""/155) 21:05:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @broadcast}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', r7}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 21:05:30 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x400100) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$GIO_FONT(r4, 0x4b40, &(0x7f0000000040)=""/155) 21:05:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 21:05:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000001c0)=""/155) [ 920.101002][ T2749] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.127628][ T2748] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20800, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:05:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b61, &(0x7f00000001c0)=""/155) [ 920.301766][ T2759] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.330658][ T2767] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/204) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b40, &(0x7f00000001c0)=""/155) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x6) 21:05:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) 21:05:30 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x3, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 920.585251][ T2783] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.617334][ T2784] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 920.657587][ T2788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 920.727558][ T2795] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 21:05:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0xcdf7, 0x90f, 0x1}) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x569900) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000000c0)=""/120) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(r6, &(0x7f0000001740)={&(0x7f0000000280)=@isdn={0x22, 0xbd, 0x1f, 0x4, 0x7}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)="197bfe1b773256a97d43af50f3f9b8fa883a505c8c31988503616833894d3bd02f290488ce7d4f706b66be9f54a0c4162caa2702317a2c73305bc9b5fb554d0695d7fc96465ef3da15f161322ed046af3400540c29f08f3cda6df961cfbfae8503ea6c76cf98d05fcda2b02b4d391fabf5c7663af9ecee34e4db75463a074b25968c7d3db9eed7909a8234e4353b34b7b0dc99f1e8c932d45f0e166366e6333744b50a9ae8d7a30b132cfe8d3bce0bcc3d41642b41e5156372ba651a9a90ef4d0cfeabdc36306e", 0xc7}, {&(0x7f0000000400)="b85a7b36255eb87c222b6f1dfd98e0b4dfb738b4e06e55e1840f88960a409b3087e5030f3dfe1160e814cd", 0x2b}, {&(0x7f0000000440)="868a225e0c51e2860a52b24954c157cdf464048e1121371567e9473c0ed886e34ef37b2dbe487c28770fcc42c3b04ab3e9cd948e64d9b20de4ee0b054323c0d8c3fb96260900a2f3ce69eacb53a1845b982767b2f7b2a7884162a2a600a900c62d762544e7effaec78399fdc16186be792f753191628866c6cb9de5cf22571bf4489a5007a05f2319c028a4c6cf742ba445890fad7aed59ae0f93fe645500f7a426431f5171aaf15c6f71e8d5f1232a2c2435513193ef099ef2867cc4e32", 0xbe}, {&(0x7f0000000500)="9cb2d6a039b545f7faf20fc8c8d2e3517823d7c60549d104b201670d0eb34dc324b916f8123bec2a2b3239056db480637c82", 0x32}, {&(0x7f0000000540)="5d84ceb85339541a284be6986571f4ad60f8c71cc1d436e5745171c34c527d64d86197e563c329a800f967abf76862", 0x2f}], 0x5, &(0x7f0000000600)=[{0xd8, 0xff, 0x2, "ed9cbd3c9438865eb674ff0f456d2a7273b57d4a96bac42447e2a2d2b7f30e6f43689691598643e3e16ce00bfa158a74332dec3679c0043f7e1ad857527e0addc6183ea0e98227c9962c0eaf9d6e49fa2bdc6752f8b5957142add94296dd250229f9a03f1b1edbc405bbc6986a73150e0e8b5024b56a72dd908644392b246ca3975fc55dcae4151b04487dee4f0c0fbca525d2c8c4f4845b9e36641e9217bde3c8ff10bfe5ab0d5e35ecfbb6fcb7bfc6be5ddf112adf5d81efba55e49e4dd0f709ee522c"}, {0x28, 0x107, 0x3, "8f79dfe923da66a139d8523c11f8253b78e425"}, {0x1010, 0x113, 0x4, "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"}], 0x1110}, 0x20000000) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r7, 0x89ec, &(0x7f0000000180)={0x2, 0x4}) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) 21:05:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b62, &(0x7f00000001c0)=""/155) 21:05:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 21:05:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000002680)={0x274, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62705fda}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ebefb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32153328}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d85756e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d45f361}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd023e1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x346d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33ed755d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60572b01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf158}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9162}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1c2}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf682}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb34a2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf570}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ef7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4929f84e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x601e91bd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5923ae11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd836}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ac6b6b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3125}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8c3077}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fef1a73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x937d5c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9c8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe503}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48624494}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8072}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66ba9bb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd78b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c794e74}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0xba37a3daea27acde}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8c973ff}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b32f505}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cafd54c}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7341ec29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba02e0d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2052c3fe}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000840}, 0x90) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3416e63b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x696b8cb7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3f14fb}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12aa40d5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f74409}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5495678a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6153ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5837ab04}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f9028a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a4d8651}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d60e63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x464c7ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe4b34e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ef5b14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5067bec2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b366e04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7362a2a3}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000805}, 0x40010) 21:05:31 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x4, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 921.047058][ T2811] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 921.076338][ T2813] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b63, &(0x7f00000001c0)=""/155) 21:05:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x210b80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='stat\x00') ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000080)={0x0, 0x9}) 21:05:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b64, &(0x7f00000001c0)=""/155) [ 921.244292][ T2832] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b65, &(0x7f00000001c0)=""/155) 21:05:31 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x5, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)) [ 921.518297][ T2852] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 921.644458][ T2858] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 21:05:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 21:05:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b66, &(0x7f00000001c0)=""/155) 21:05:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100000004001fe) ioctl$GIO_FONT(r1, 0x4b68, 0x0) 21:05:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000080)=""/171) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:05:32 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x6, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b67, &(0x7f00000001c0)=""/155) 21:05:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) eventfd(0x1f) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) dup(r0) [ 922.304832][ T2883] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000040)=""/15) ioctl$GIO_FONT(r3, 0x4b68, 0x0) 21:05:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, &(0x7f00000001c0)=""/155) 21:05:33 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 21:05:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 21:05:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8400, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0xc, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 21:05:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x1101, 0x0, 0x0, {0xc}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28011}, 0x0) 21:05:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b69, &(0x7f00000001c0)=""/155) 21:05:33 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7bbb9e7}, 0x0) 21:05:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6a, &(0x7f00000001c0)=""/155) 21:05:34 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$GIO_FONT(r0, 0x4b68, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 21:05:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6b, &(0x7f00000001c0)=""/155) 21:05:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe7b9bbd7}, 0x0) 21:05:34 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x300, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 924.015437][ T2984] __nla_validate_parse: 7 callbacks suppressed [ 924.015450][ T2984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 924.129289][ T2986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xfee00) 21:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/164) 21:05:35 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x8, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6c, &(0x7f00000001c0)=""/155) 21:05:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 21:05:35 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x500, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 924.728337][ T3016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6d, &(0x7f00000001c0)=""/155) [ 924.785359][ T3018] EXT4-fs: 6 callbacks suppressed [ 924.785376][ T3018] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x20840, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x980000, 0x5, 0x10000, r0, 0x0, &(0x7f0000000040)={0x980925, 0x4, [], @p_u32=&(0x7f0000000000)=0x6}}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000280)={{0x5000, 0xe002, 0xc, 0x4, 0x6, 0x4, 0x20, 0x40, 0x2, 0x4b, 0xf7, 0x1}, {0x0, 0xf000, 0x8, 0x20, 0x4, 0x2, 0x3f, 0x40, 0xa0, 0x7, 0xe7, 0x6}, {0x5000, 0x0, 0x3, 0x9, 0x2, 0x81, 0x0, 0xbd, 0xa7, 0x0, 0x3, 0x80}, {0x1, 0xf000, 0xd, 0x3, 0x7, 0x91, 0xf9, 0x3f, 0x9, 0x6, 0x5, 0xff}, {0x5, 0x10000, 0xa, 0x6, 0x50, 0x1f, 0x7e, 0x0, 0x7, 0x8e, 0xd6, 0x2}, {0x2, 0x4, 0x9, 0x2, 0x5, 0x0, 0x1f, 0x7f, 0x3, 0xb7, 0xcd, 0x3}, {0x10000, 0xf000, 0x0, 0x6, 0x9, 0x4, 0x6, 0x0, 0x80, 0x3, 0x3f, 0x8}, {0x5000, 0x1000, 0xc, 0x7f, 0x3d, 0x1, 0x7, 0xae, 0x26, 0x21, 0x6, 0x40}, {0xd000, 0xeed}, {0x0, 0x7f30}, 0x80000000, 0x0, 0x10000, 0x495d771ab7133feb, 0xa, 0xc400, 0xf000, [0x4, 0x0, 0xffffffffffffff81, 0x5]}) 21:05:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x78}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4167}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) [ 924.956626][ T3034] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:35 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x600, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 925.022236][ T3023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 21:05:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b70, &(0x7f00000001c0)=""/155) [ 925.255956][ T3049] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 925.341191][ T3054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 925.484336][ T3057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1410, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000280)=0x2) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x57, "83edd1b2aeac5ff5146ce244d520c1552c2ff291b4fe75c84b2e54f8c590a0c1b14aea5797b2714aba329a211336fe8e1758a4cda95c70ae431cc4359263ac87b74362a1ebb53ea6df51b2c6f3abae70634d45edf77554"}, &(0x7f0000000080)=0x7b) 21:05:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) 21:05:36 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x700, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b71, &(0x7f00000001c0)=""/155) 21:05:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000345000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 925.678895][ T3076] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 925.718119][ T3079] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b72, &(0x7f00000001c0)=""/155) [ 925.904067][ T3097] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 925.958398][ T3091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4bfa, &(0x7f00000001c0)=""/155) 21:05:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r3, 0x0, 0x7fffffff) 21:05:36 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setresgid(r3, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x20, 0x48000}, 0x90) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xffffffffffffffd4) setuid(r5) write$P9_RSTATu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000de81007ef00000000000040e2be7da200c2bf414616bcfbd6f00000006000000000000faa3bf688eb0ff000000000100000000000000310073b4962722a8d764b9706f7369781661206b5f6100000000735c403847505f3a76626f786e6574b7421a220e12519165bb947f7877010ad0cf9f6c696e75782d270f002f6465762f73657175656e636572000f002f6465762f73657175656e6365720000000d0000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5], 0xb3) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x121201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000200)=r7) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x3ff, 0x0, &(0x7f0000000040), &(0x7f0000000040)=[0x3f, 0x7fff], &(0x7f0000000140)}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r8, 0x4b68, 0x0) 21:05:36 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x3f00, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 21:05:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4bfb, &(0x7f00000001c0)=""/155) 21:05:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONT(r1, 0x4b68, 0x0) [ 926.277140][ T3117] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 926.297039][ T3121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 926.438887][ T3126] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 926.453993][ T3125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4c01, &(0x7f00000001c0)=""/155) 21:05:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5201, &(0x7f00000001c0)=""/155) 21:05:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r3, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000140)=""/148) 21:05:37 executing program 0: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x240, 0x0) lseek(r0, 0x2, 0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x6, 0x2]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl$GIO_FONT(r1, 0x4b68, 0x0) 21:05:37 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xff00, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 21:05:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000440)=""/4096) r2 = open(&(0x7f0000000180)='./file0\x00', 0x410da3, 0x15) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00003d2000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="66bad104b006ee0f20d835200000000f22d82e660f00120f01c966ba4000b0fcee0f7864790036410f07c462edaad23e2e66420f3882ad00f0ffff66baf80cb8fe418b85ef66bafc0c66ed", 0x4b}], 0x1, 0x1, &(0x7f0000000100), 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={0x37}) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0, 0x1}, 0x208, 0x0, 0x8d61}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5409, &(0x7f00000001c0)=""/155) [ 927.187244][ T3164] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:37 executing program 5: prctl$PR_CAPBSET_READ(0x17, 0x1d) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x7fffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x3ff, @private1, 0xfffffffd}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0xfff8, 0x9, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e22, @broadcast}], 0x94) 21:05:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540b, &(0x7f00000001c0)=""/155) [ 927.341966][ T3187] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x4}, 0x7fff}, {{&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/148, 0x94}, {&(0x7f0000003540)=""/151, 0x97}, {&(0x7f0000003600)=""/148, 0x94}], 0x6, &(0x7f0000003740)=""/79, 0x4f}, 0x4}], 0x2, 0x22, &(0x7f0000003840)) getsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000003880), &(0x7f00000038c0)=0x4) 21:05:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x2) 21:05:38 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540c, &(0x7f00000001c0)=""/155) 21:05:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 21:05:38 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$SIOCNRDECOBS(r2, 0x89e2) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x3) [ 927.834025][ T3225] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:38 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540d, &(0x7f00000001c0)=""/155) 21:05:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000080)={0x5, 0x4, [0xfffb, 0x9, 0xf000, 0x3, 0x5], 0x9}) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) 21:05:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x4) 21:05:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="66a2e5c2d0841887d9714aba6360f7ea5256acf8ca363aac2547a390b632718b93bddf01416476cd11da017cef6901bed93d4b7a897c6fac1702ae10eb2d81ca42a589e73592273ee8e3463423842ecf95732884ed4b33f5f75b1acf3ce5cc12aef6ae97acc96080368a2f513a334a1607251988f4774d64018a53427eb0c37af72e55ab47"], @ANYRESDEC=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x5}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x34}, 0x2c, r5}) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0xf, 0x4, 0x2, 0x24, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x1c, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x1d, 0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x4d4, 0x3f, 0x1, 0x8b, 0x2, 0xa0000000}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x29, 0x14, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbf, 0x10001, {0x6, 0xff, 0x81, 0x1, 0x0, 0x8000, 0x0, @in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@ipv4={[], [], @remote}}}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in6=@mcast2, 0x1a, 0x4, 0x14}]}, 0x120}}, 0x20008004) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/155) 21:05:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540e, &(0x7f00000001c0)=""/155) 21:05:39 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2aa480e, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x5) 21:05:39 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540f, &(0x7f00000001c0)=""/155) 21:05:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5410, &(0x7f00000001c0)=""/155) 21:05:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6) 21:05:39 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x3000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5412, &(0x7f00000001c0)=""/155) [ 929.217966][ T3337] __nla_validate_parse: 10 callbacks suppressed [ 929.217979][ T3337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 929.379993][ T3351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5413, &(0x7f00000001c0)=""/155) 21:05:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000800000000", @ANYRES32=r1, @ANYRES32=r2], 0x18, 0x10}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}], 0x38}, 0x24028014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x200008d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r7, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20}, 0x0) getgroups(0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, r4, r5, r7]) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) 21:05:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x8) 21:05:40 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x4000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 929.860784][ T3382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5414, &(0x7f00000001c0)=""/155) [ 929.972526][ T3387] EXT4-fs: 7 callbacks suppressed [ 929.972543][ T3387] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) [ 930.164452][ T3395] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x3, 0x20000) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x9) [ 930.248018][ T3416] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5415, &(0x7f00000001c0)=""/155) 21:05:40 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x5000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 930.436457][ T3422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5416, &(0x7f00000001c0)=""/155) [ 930.602131][ T3428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 930.673722][ T3447] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 930.795015][ T3454] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x40000, 0x1, 0x403, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:41 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/146) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 21:05:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xa) 21:05:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5418, &(0x7f00000001c0)=""/155) 21:05:41 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x6000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541b, &(0x7f00000001c0)=""/155) [ 930.980565][ T3463] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 931.074678][ T3480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 931.092878][ T3482] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 931.267614][ T3496] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xb) 21:05:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541c, &(0x7f00000001c0)=""/155) 21:05:41 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x7000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 931.595212][ T3506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x40) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = eventfd2(0x401, 0x800) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x200, 0x1f, r3}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) [ 931.674664][ T3510] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 931.778746][ T3520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 931.846291][ T3529] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541d, &(0x7f00000001c0)=""/155) 21:05:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(r3, r4, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r7, 0x2}, &(0x7f0000000040)=0x8) 21:05:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xc) 21:05:42 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 932.384248][ T3550] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541e, &(0x7f00000001c0)=""/155) [ 932.517245][ T3563] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541e, &(0x7f00000001c0)=""/155) 21:05:43 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xe48aa02, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe) 21:05:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{r1, r2/1000+10000}, {0x77359400}}, &(0x7f0000000080)) 21:05:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5421, &(0x7f00000001c0)=""/155) 21:05:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x113000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 21:05:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xf) 21:05:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5422, &(0x7f00000001c0)=""/155) 21:05:43 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5423, &(0x7f00000001c0)=""/155) 21:05:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x10) 21:05:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/155) 21:05:44 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5424, &(0x7f00000001c0)=""/155) 21:05:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0xffff) 21:05:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x11) 21:05:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5425, &(0x7f00000001c0)=""/155) 21:05:44 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) [ 934.470266][ T3689] __nla_validate_parse: 8 callbacks suppressed [ 934.470334][ T3689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 934.597178][ T3700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5427, &(0x7f00000001c0)=""/155) 21:05:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x12) 21:05:45 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x7f) ioctl$GIO_FONT(r2, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:45 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xff000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5428, &(0x7f00000001c0)=""/155) 21:05:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) setuid(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x4e21, 0x0, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x32}, {0x100000001, 0x0, 0x8, 0x3ff, 0x401, 0x6, 0x3698, 0x7f}, {0x8, 0x401, 0x7b, 0x63}, 0x8, 0x6e6bbb, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d4, 0x3c}, 0x2, @in6=@mcast1, 0x3503, 0x1, 0x3, 0x7, 0x3, 0x1, 0xbbe}}, 0xe8) lseek(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xb2341, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000040)={r3, &(0x7f00000000c0)=""/171}) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 935.119833][ T3729] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 935.138739][ T3730] EXT4-fs: 8 callbacks suppressed [ 935.138755][ T3730] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 935.191721][ T3735] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5429, &(0x7f00000001c0)=""/155) [ 935.313186][ T3746] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000000)={0x1}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x13) 21:05:45 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5437, &(0x7f00000001c0)=""/155) [ 935.506138][ T3756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 935.591712][ T3762] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 935.635988][ T3760] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5441, &(0x7f00000001c0)=""/155) [ 935.741105][ T3774] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000000)={0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_FONT(r6, 0x4b40, &(0x7f00000001c0)=""/144) 21:05:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x14) 21:05:46 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5450, &(0x7f00000001c0)=""/155) [ 936.159702][ T3793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 936.181465][ T3791] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 936.369479][ T3810] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 936.395314][ T3803] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:47 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5451, &(0x7f00000001c0)=""/155) 21:05:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x60) 21:05:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x50000, 0x0) fcntl$getflags(r0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x800, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0xfffffffd, 0x4], 0x2, 0x80000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) [ 936.697780][ T3826] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 936.699233][ T3823] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5452, &(0x7f00000001c0)=""/155) [ 936.868399][ T3844] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 936.929863][ T3838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:47 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x545d, &(0x7f00000001c0)=""/155) 21:05:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x300) 21:05:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5460, &(0x7f00000001c0)=""/155) [ 937.697273][ T3874] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5501, &(0x7f00000001c0)=""/155) [ 937.846586][ T3895] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x4}, &(0x7f0000000040)=0x8) 21:05:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x500) 21:05:48 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5502, &(0x7f00000001c0)=""/155) 21:05:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(r1, 0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x121100, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000040)={0x140, 0x14, &(0x7f0000000300)}) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x100, 0x70bd2c, 0x25dfdbfd, {0x2, 0x80, 0x40, 0xfd, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:49 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x600) 21:05:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5600, &(0x7f00000001c0)=""/155) 21:05:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5601, &(0x7f00000001c0)=""/155) [ 939.081038][ T3943] batman_adv: batadv0: Adding interface: veth29 [ 939.106302][ T3943] batman_adv: batadv0: The MTU of interface veth29 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:05:49 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5602, &(0x7f00000001c0)=""/155) [ 939.275977][ T3943] batman_adv: batadv0: Not using interface veth29 (retrying later): interface not active 21:05:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x900) 21:05:49 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/167) 21:05:50 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 939.643732][ T3989] __nla_validate_parse: 8 callbacks suppressed [ 939.643795][ T3989] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 939.851376][ T3991] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2271, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r2) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r3) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$read(0xb, r3, &(0x7f0000000080)=""/246, 0xf6) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000180)={0x7e}) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r5, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000440)={0x2, [0x0, 0x0]}, &(0x7f000095dffc)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)={r8, 0x83, 0x89, "408ab9eb55b6f2e5b3816e893b686fd332a1de4e4bf92e5528301c9a4cdfa6a833f0828167c4a7af81394981b77a4041ebefaeae8c5186452381efdf5e227ae5b993a792e5c1d4e39eb536c19345a65849fb7170c20a9619726155154a2ada43215cdbabdf0828d472886cedc03cef25f17493284b266ba8cc3604623c206c1fcd085bac4548b1cd19"}, 0x91) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xa00) 21:05:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5603, &(0x7f00000001c0)=""/155) 21:05:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r4, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:50 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) [ 940.430399][ T4022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5605, &(0x7f00000001c0)=""/155) [ 940.475295][ T4021] EXT4-fs: 8 callbacks suppressed [ 940.475311][ T4021] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 940.561759][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xb00) [ 940.747774][ T4045] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5606, &(0x7f00000001c0)=""/155) 21:05:51 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 940.913583][ T4050] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x4c0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0x4, 0x34}, {0x401, 0x8, 0x7f, 0x9e4c}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x4, 0xff, 0x5, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x2e, 0x1, 0x7, 0xffffff01}, {0x0, 0x8, 0x2, 0xe0c}, {0x2, 0x2, 0x7f, 0x6}, {0x1, 0x1, 0x8, 0x7}, {0x5, 0xfb, 0x3f, 0x46c}]}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xf000, 0x5, 0x5, 0x6}, {0x2, 0x7f, 0x2, 0xffffffff}, {0x7, 0x0, 0x9e, 0x5}, {0x0, 0x3, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8a41}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x9, 0x5, 0x8}, {0x0, 0x6, 0x1, 0xeee4}, {0x1, 0x0, 0x2, 0x2}, {0x0, 0x90, 0x2, 0x1ff}, {0x4, 0x1, 0x6, 0x7b58}, {0x8001, 0x74, 0x1f, 0x4}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5607, &(0x7f00000001c0)=""/155) [ 941.046039][ T4058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 941.108797][ T4057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 941.148805][ T4063] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 941.162130][ T4065] batman_adv: batadv0: Adding interface: veth31 [ 941.175551][ T4065] batman_adv: batadv0: The MTU of interface veth31 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.201366][ T4065] batman_adv: batadv0: Not using interface veth31 (retrying later): interface not active [ 941.223246][ T4058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xc00) 21:05:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5608, &(0x7f00000001c0)=""/155) [ 941.318761][ T4081] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 941.332382][ T4065] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 941.393313][ T4084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:52 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xe48aa0200000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5609, &(0x7f00000001c0)=""/155) 21:05:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:52 executing program 5: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x102, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/236) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe00) 21:05:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="2fbc6ea0c1110f7aa72678a5855dd8165539fc99e493709394757138f0bcde1f539b2872198a7c081d3f1e766ac97563b6ae8f621a77d65b7ce8a1bc4c25106f3dfaa4c7d414cdc2e0febaf199a6b0ad444c07bf9bf3f65bb15b9c074229df170e86497e30cf4229cd24b79b8a5b2b501ccb4c003c13f9e64129cd862daeea8514d356ee54a026152bc49d4f018715baa9d9ecf42206367260e1cf2a027abcbb521c6e5e92f04b07f13f62f85b4670879388fcf98029040a5cdf9dc4bc00"/201, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @multicast2}}, 0xffffffff, 0x58c7, 0xf95cbdf, 0x3ff, 0xdd, 0x6, 0x2}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000300)=0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000000)={0xfc, &(0x7f00000000c0)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) shmget(0x0, 0x1000, 0x54000000, &(0x7f000077c000/0x1000)=nil) [ 941.763790][ T4110] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560a, &(0x7f00000001c0)=""/155) [ 941.930047][ T4130] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/177) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:52 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xf00) 21:05:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560b, &(0x7f00000001c0)=""/155) 21:05:52 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/158) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001280)={0xfffffffd, {{0xa, 0x4e22, 0xfffffffe, @private1, 0xffffffff}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x3, @empty, 0x5}}, {{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x3}}, {{0xa, 0x4e20, 0x7, @empty, 0x6}}, {{0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, [], 0x1}}}]}, 0x290) [ 942.282052][ T4146] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:52 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560c, &(0x7f00000001c0)=""/155) [ 942.760999][ T4174] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1100) 21:05:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560d, &(0x7f00000001c0)=""/155) 21:05:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xbc, 0xc0000) socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) 21:05:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) fsetxattr$security_evm(r3, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="05020200000006003771f88b3e69f8c675b1baf8ddf9a88f1523dea8f0b746215e0755d77b4d56dc28a7b8fe4a098dfdc681427f641ba3d346a543a4fb624e04"], 0x40, 0x2) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 942.917590][ T4181] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560e, &(0x7f00000001c0)=""/155) 21:05:53 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1200) 21:05:53 executing program 5: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) write$P9_RSTATu(r0, &(0x7f0000000000)={0x96, 0x7d, 0x1, {{0x0, 0x81, 0x3, 0x8001, {0x4, 0x0, 0x8}, 0x8900000, 0x401, 0x4, 0x4, 0x0, '', 0x1d, '}em0em1em0nodev.vmnet0#wlan1(', 0x30, 'ppp1@,*systemuser-ppp0}-security,security[^\xc9bdev', 0x1, '*'}, 0x0, '', r2, r4, r6}}, 0x96) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r7, 0x4b40, &(0x7f00000001c0)=""/155) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="119f190000000000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="7d323c27e6a67d70b4a7c1f8a2d8e01e4475d2e34dd05cff2c25367c5e7fcba7b897a7bc3a0aadeb7c65809b2c81276eaba15ba99e5054d875aea84b0fa786adce530035e3178b82ead3f285c32ea58ecdc00c707177ad", 0x57}], 0x2, &(0x7f0000001540)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000011000000000000000000000001000000090000000000000030000000000000000000000007000000070b76208f7eab42fd0b8f4414de937f00000100000005e000000100007e56001400000000000000000000000200000000000004000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000027f0000010000000084000000000000000000000007000000441c5373ac14140efffffff900000000000063fa6401010200009848441020d0000000080000000400000081071b41ac1414320000000064010100ac1e0101ac1e010100000000442c3e100001000000000008000000050000000000000002ffffffff0000004e000080000e0000000000000800000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1e01016401010104004000"], 0x140}, 0x8880) [ 943.339023][ T4210] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x103000, 0x0) 21:05:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1300) 21:05:54 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xff00000000000000, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1400) 21:05:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560f, &(0x7f00000001c0)=""/155) 21:05:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000000)={0x0, [0x2, 0x8, 0x0, 0xeed8, 0x4, 0xe1, 0xfe00, 0x5, 0x400, 0x3, 0x0, 0x7ae6, 0x2, 0x6, 0x2, 0x7f, 0x4, 0x2, 0x1, 0x7, 0x7f, 0xb0, 0x86ab, 0x6, 0x9, 0x3f, 0x7fff, 0x9, 0x2, 0x4, 0x4, 0x0, 0x7, 0x8, 0x1ff, 0x3, 0x76, 0x6, 0x8001, 0x80, 0x3, 0x3, 0x2, 0xfff, 0x80, 0x0, 0x101, 0x40], 0xb}) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:54 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:54 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000080)=""/179) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0xffffffffffffffff) pidfd_send_signal(r1, 0x13, &(0x7f0000000000)={0x3b, 0x14000, 0xfff}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x900) ioctl$TCGETA(r2, 0x5405, &(0x7f00000001c0)) 21:05:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x6364, &(0x7f00000001c0)=""/155) 21:05:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x5865) 21:05:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8912, &(0x7f00000001c0)=""/155) 21:05:54 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000001940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000019c0)=""/117, 0x75}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/192, 0xc0}, 0x1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x159000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x840}, 0x4000800) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:54 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6000) 21:05:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) [ 944.777545][ T4323] __nla_validate_parse: 16 callbacks suppressed [ 944.777557][ T4323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 944.957907][ T4337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8933, &(0x7f00000001c0)=""/155) 21:05:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:55 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x83, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x1, &(0x7f00000000c0)="11767407768466ea4cb6ae981ebe8b81607014aa80e8b96a68f86b8751d78683d0be332a632f67af65c637451f193b734a6f21b7ecf46c2b19e9c6f98eaa7c0aabf478"}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000000)={0x8, 'geneve0\x00', {'macsec0\x00'}, 0x40}) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) 21:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6558) [ 945.272540][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae01, &(0x7f00000001c0)=""/155) [ 945.379509][ T4372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae41, &(0x7f00000001c0)=""/155) 21:05:56 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x5, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000fddbdf2501000000080018000a01010108001900ffffffff050013007f0000000500060081000000"], 0x34}, 0x1, 0x0, 0x0, 0x8c4}, 0x2) 21:05:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x8100) 21:05:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae60, &(0x7f00000001c0)=""/155) [ 945.742144][ T4391] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 945.844506][ T4392] EXT4-fs: 9 callbacks suppressed [ 945.844522][ T4392] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 946.009104][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 946.069704][ T4405] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae80, &(0x7f00000001c0)=""/155) 21:05:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 21:05:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:57 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x6, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x34000) 21:05:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x180000b, 0x12, 0xffffffffffffffff, 0xffffc000) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x8140, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x88d2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="4afb305c5e40e1f67b930d2e92af1169e91427f6d96787e94f1a0552223e8060a8d952548620046bfa5f3a60432d2554c76b002c7cf494c76f082fca5340de58f4ba4e53bf11534dcad3d31815a0ec9fb119691906f3e9b0f2558a95ebb024aaa809bc4f1b0000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={r6, 0x50, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000140)=0x10) 21:05:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_bridge\x00', {}, 0x4}) recvfrom$ax25(r3, &(0x7f0000000280)=""/197, 0xc5, 0x10020, &(0x7f0000000040)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000000)={0x9, 0x80, 0x1, 0x3, 0x15, "3e177b52655f74c7"}) 21:05:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x400454ca, &(0x7f00000001c0)=""/155) [ 946.656832][ T4431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40045564, &(0x7f00000001c0)=""/155) [ 946.718119][ T4433] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 946.870968][ T4457] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 946.881318][ T4445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40049409, &(0x7f00000001c0)=""/155) 21:05:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x400300) 21:05:57 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:57 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup(r1) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/221, 0xdd}, {&(0x7f00000001c0)=""/160, 0xa0}], 0x2, 0x4) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6b83e000) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/230, 0x20000426) lseek(0xffffffffffffffff, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x10001}, 0x8) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x1, 0x1, 0x0, 0x40, 0x0, 0x7f, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xca3c, 0x7f}, 0x890, 0x2, 0x1, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4008ae89, &(0x7f00000001c0)=""/155) [ 947.110675][ T4469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 947.232159][ T4475] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 947.323686][ T4479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 947.374574][ T4475] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4008ae90, &(0x7f00000001c0)=""/155) 21:05:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1000000) 21:05:58 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x7fff, @random="8fb7d7b8862b"}) 21:05:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40186366, &(0x7f00000001c0)=""/155) 21:05:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x2000000) 21:05:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x401c5504, &(0x7f00000001c0)=""/155) [ 947.847811][ T4516] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x5, 0x3d, 0x6}) 21:05:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4020940d, &(0x7f00000001c0)=""/155) [ 948.057091][ T4516] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4020ae46, &(0x7f00000001c0)=""/155) 21:05:58 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x300, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 948.484188][ T4548] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x3000000) 21:05:59 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc0, 0x0) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000000c0)=""/155) 21:05:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) mmap(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x300000a, 0x80010, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x48542, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(r0) getrlimit(0xc, &(0x7f0000000140)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c9fdc91bb06778422baae37", @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf2505000000080004000a010101140003000000000000000000000c446a337f9d00ffffac1414aa1400e5fffd8000000000000000000000000000aa0800050064010102cf0a6dd3c58fe89816501686ce1ee85511775a7c36496c621c7a4a7d2e3d6faa9451ce0056c80db5a1bdc238c7b3e4ddb398fe2b64dd31fdc98470a474b9dfd3196d1b4871a157b0f3a7835dd4915e76d493da61add099aa57644be09e2178fcde93e89bd1705e0da3a5c2edf13f02cd314e4db21b23c84219b1e58af98801f5b251111733823d82e9720dd7d455a06024d746894481979fff2f1a7ae3a24d0bd6059de5717450e6"], 0x4c}}, 0x80400c1) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:05:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x405c5503, &(0x7f00000001c0)=""/155) [ 948.702555][ T4558] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:05:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x4, 0x5, 0x0, 0xbb0, 0x9f}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4090ae82, &(0x7f00000001c0)=""/155) 21:05:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4138ae84, &(0x7f00000001c0)=""/155) 21:05:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80045432, &(0x7f00000001c0)=""/155) 21:05:59 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x500, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:05:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000000)="a40eb27261386877c08565") ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x4000000) 21:06:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80045440, &(0x7f00000001c0)=""/155) 21:06:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x505880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00006f4000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x400, [0xb569, 0x4137], 0x5}, 0x10) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f00000000c0)) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200300) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x80) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSSERIAL(r4, 0x541e, &(0x7f00000002c0)={0x17fa896c, 0x2, 0xffff, 0x0, 0x80000001, 0x81, 0x401, 0x180a, 0x0, 0x61, 0x3f, 0x3, 0x5, 0x1, &(0x7f0000000200)=""/151, 0x7, 0x260, 0x9}) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f0000000100)=""/155) 21:06:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x5000000) 21:06:00 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x600, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80086301, &(0x7f00000001c0)=""/155) 21:06:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6000000) 21:06:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8138ae83, &(0x7f00000001c0)=""/155) 21:06:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000000)=""/154) [ 949.977642][ T4650] __nla_validate_parse: 10 callbacks suppressed [ 949.977654][ T4650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:00 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x700, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc004500a, &(0x7f00000001c0)=""/155) [ 950.147238][ T4653] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x8000000) [ 950.505199][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 950.624955][ T4683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x400000) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x7, 0x6, 0x4, 0x10000, 0x1, {}, {0x5, 0xc, 0x0, 0x8b, 0xcb, 0x0, "d13fe6a1"}, 0x84, 0x3, @userptr=0x72a, 0x5, 0x0, r3}) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x894e000) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x72d200) dup(r1) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000100)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42c0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x1) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0x9, 0x101, 0x3, 0x1f]}) 21:06:01 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0045878, &(0x7f00000001c0)=""/155) 21:06:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x9000000) [ 950.932440][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0045878, &(0x7f00000001c0)=""/155) [ 951.099353][ T4704] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xa000000) 21:06:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc008ae05, &(0x7f00000001c0)=""/155) [ 951.320439][ T4718] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc018620b, &(0x7f00000001c0)=""/155) 21:06:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) [ 951.425281][ T4720] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xb000000) 21:06:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0189436, &(0x7f00000001c0)=""/155) [ 951.634139][ T4732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 951.893793][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc020660b, &(0x7f00000001c0)=""/155) 21:06:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xc000000) 21:06:02 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xff00, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) getpeername(r2, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x80) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200140, 0x30) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x544f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$input_event(r3, &(0x7f0000000000)={{}, 0x16, 0xfd6f}, 0x18) 21:06:02 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x20, 0x27, 0x8, 0x6, 0x0, 0x2, 0x10000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x401, 0x8}, 0x8804, 0x1, 0x7, 0x1, 0x1, 0xfffffffa, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x9) 21:06:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:02 executing program 5: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0/../file0\x00', 0x40, 0x6) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0xff, 0x7f, 0xeae0, 0x1ff, 0x5, "bcb2d15bb56c0352"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000180)={0x5b, 0xfff, 0x7}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x100000, &(0x7f0000000040), 0x8, r4, 0x8}) dup(r3) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/144) 21:06:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x17, 0x18, &(0x7f0000000000)="810d7ce813ac6babd7930daa67362918af1acdc49dc724a9"}) 21:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe000000) 21:06:03 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x101) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000c1306ac22f128d7d9e3d643a00000c0000000c0032090000b14fe9184800"], 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="02002bbd7000fcdbdf25140000002c00038008000200010000000800030004000000080002000200000008000300c1ffffff08000100200000003800068004000200040002000800010008eeff000400020b5bebda0002000000080001000d000000040002000400020008000100800000001c000980080002000200000008000200067d000008000200020000001c0003800800010055000000080002000100000008000300000000001000028008000100ffffffff04000400"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x3c, r4, 0x401, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x8141) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r5, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/155) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) [ 952.847055][ T4796] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 952.895450][ T4796] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xf000000) 21:06:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x60240, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000080)=""/179, &(0x7f0000000140)=0xb3) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000280)=0x9392, 0x8) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x5) 21:06:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000000)={0xef2, 0x2, 0x35, "6a27bd29bc88e877d44a10444f42bb775a47731ccba39ef387147bd5c06490ce02a47e13b72b6c2f57046d0479fdd8a3208ec03e2a146d4bc55b6e46", 0x4, "d790f3e7ceeedb5ef9031a5f3e08c52d5d2b3b5388d9f2d74548522f5db5c0dbae5cc573dd4d730c0be3092c1f315c27590764d6c7432b5bd32ac64e"}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:03 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x10000000) 21:06:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=""/221, &(0x7f0000000100)=0xdd) 21:06:03 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) getdents64(r0, &(0x7f0000000340)=""/230, 0xe6) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffe1}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1f}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setxattr$trusted_overlay_origin(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='trusted.overlay.origin\x00', &(0x7f00000008c0)='y\x00', 0x2, 0x3) syz_mount_image$tmpfs(&(0x7f0000000440)='tmpfs\x00', &(0x7f0000000480)='./file0\x00', 0x100000001, 0x3, &(0x7f0000000740)=[{&(0x7f00000004c0)="2a289138fd723b00cb042c9bf3415b7b3d29b4b0993f2d5532bae529fc6b9096add0884dcf779eb36dbbe14bbb0139f09432af4a067b1f452f7b3473f1ac887f1390327d012698252d0960440f1f523f73989f1e6dfcb80a020e5318589e344c1d1b5ac7db816a9461e64c8eae27ded5293a6db24cead745748d5681d2d5cdec966c83e6327ce203c8831fd867a2b3025895a4b032f33e2104f900ecfb1e67ca02409bb73e0326e94c8a3db36b2c3cdede6ac063125ce66a736528b8f069cdc560cba92a032d13fc35a82089a0bd7dac9bb1d200432c8cd5f2e590555bc91507070c2ac7c6fe0de0dd9c5e1b007d53ddf041c7d0d495a8f7", 0xf8, 0x1}, {&(0x7f00000005c0)="dd00ace535d5947f50f3a642d49ee18fdbecd15c5ef4ed37cc62fe959dd0b7688dbb3c2a7bae5b4b7b9fabab019f46174a5b0164bd1d32e0e9c5ee2a7c6d495049bc2595a4411e590315e96688636bd9", 0x50, 0x1}, {&(0x7f0000000640)="0987e3f2080664fbc30245b21c50bbef5dd271ded50adccd1bb80c8d6f1e6e92574f0e0753cc126608fd3f6f840231d73d93b0bae026df38b4dacbb54326ea403cdbeb4ca20d1c0973b99eb9ac6b573f4e8a2e46d45d02ef47802c85e669b2ca2b66923e9c539f7887f3a69ade63fd08d7d08f280bb9431bf3ec4e6d7f745a00836c2f335d232184301d18544423f6bfadebea3d445cec1fda6dff8410e7d4183326810d6ed221713cf65cfef3ffe072922dcee9ff927dbc095b0ff736cebdcf47f614736ff91e5e5ddc5ad2ae227f71dd65ab1d62", 0xd5, 0x9a}], 0x200000, &(0x7f00000007c0)={[], [{@obj_type={'obj_type', 0x3d, '+securitylovmnet1'}}, {@obj_type={'obj_type', 0x3d, 'trusted.overlay.origin\x00'}}, {@uid_lt={'uid<', r3}}]}) statx(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x2, &(0x7f00000001c0)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000300)={0x800100a, 0xe893, 0x1}) lseek(r0, 0x2, 0x1) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/149) 21:06:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0xa4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet6(0xa, 0x6, 0x10001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f00005e5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="45b00041de43dd360f23bdc462b9f7f2410f72f56f420f0666baa100b06cee66450f388212b97a0100000f32260faeb666000000", 0x34}], 0x1, 0x29, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3}, @efer={0x2, 0x2000}], 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r7 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r7, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:04 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:04 executing program 5: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) getsockname$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x11000000) 21:06:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000440)=""/156) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 21:06:04 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffd000/0x2000)=nil}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b40, &(0x7f00000001c0)=""/155) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xaa8c) 21:06:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x12000000) 21:06:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x159080, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000a1656f5a0000280012000c000100766574680000000018813200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d15177298100"/99, @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@local, 0x4e22, 0x8, 0x4e21, 0x0, 0xa, 0xa0, 0x120, 0xff, r6, r8}, {0x1ff, 0x3, 0xfffffffffffffffd, 0x7fff, 0x7, 0x2, 0x0, 0x5}, {0xb8c1, 0x8, 0x1, 0x100000}, 0x80000001, 0x6e6bbf, 0x1, 0x1, 0x2}, {{@in=@multicast2, 0x4d2}, 0x2, @in=@loopback, 0x0, 0x0, 0x2, 0x4, 0x3, 0x4}}, 0xe8) 21:06:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x32, 0x81}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140d, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1ff}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:04 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 954.621257][ T4892] batman_adv: batadv0: Adding interface: veth33 [ 954.646356][ T4892] batman_adv: batadv0: The MTU of interface veth33 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:06:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x6) r3 = accept(r2, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="d9000000613132250f11964d362a5f014400000000000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000100000003000018006000100020000000600040000000000060002000000000014000300ac1414aa00"/62], 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x8001) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4005) [ 954.672104][ T4892] batman_adv: batadv0: Not using interface veth33 (retrying later): interface not active 21:06:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x800) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) readahead(r3, 0xffffffff, 0x8) 21:06:05 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x13000000) 21:06:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x2, 0x26}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$GIO_FONT(r3, 0x4b48, &(0x7f0000000100)=""/139) [ 955.507445][ T4923] __nla_validate_parse: 14 callbacks suppressed [ 955.507456][ T4923] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:06 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2aa480e, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 955.627882][ T4930] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000180)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 21:06:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x2) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x14000000) 21:06:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/155) [ 955.922501][ T4949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\t\x8d', 0x0, r0) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:06 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r9, 0x4b40, &(0x7f00000001c0)=""/155) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000000000)=0x1) [ 956.134780][ T4951] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x60000000) [ 956.231381][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 956.317933][ T4965] batman_adv: batadv0: Adding interface: veth35 [ 956.342424][ T4965] batman_adv: batadv0: The MTU of interface veth35 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.429787][ T4965] batman_adv: batadv0: Not using interface veth35 (retrying later): interface not active [ 956.460535][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 956.527241][ T4973] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 956.690935][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:06:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x0, 0xb0, 0x101}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/163) open$dir(&(0x7f00000000c0)='./file0\x00', 0x280800, 0x60) 21:06:07 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:07 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x20243, 0x80) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={{0x3, 0x0, @identifier="944a283efc528e7bc505c3fb160cbd8e"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0xa, 0xf, 0x39, &(0x7f0000000440)="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"}) lseek(r5, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000000)) [ 956.745906][ T4986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 956.807535][ T4977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x65580000) 21:06:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x8001, 0x6acf, 0x2, 0x13, "8c35e790fe08ccfbdf487ca2fcd2456efd7bea"}) 21:06:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:07 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x5, 0x1, 0x20, 0x7, 0x0, 0x0, 0x2200, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fe}, 0x1400, 0x1, 0xfffffff7, 0x0, 0x10001, 0x6, 0x5}, 0xffffffffffffffff, 0xa, r0, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_sco(r2, &(0x7f0000000140)={0x1f, @fixed={[], 0x11}}, 0x8) ioctl$KDENABIO(r2, 0x4b36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$GIO_FONT(r4, 0x4b48, &(0x7f0000000000)=""/155) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) sched_setparam(r5, &(0x7f0000000100)=0x4) 21:06:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x81000000) 21:06:07 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x220040, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f0000000340)=""/160) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDDISABIO(r3, 0x4b37) get_mempolicy(&(0x7f0000000000), &(0x7f0000000200), 0x8100000001, &(0x7f0000ff8000/0x1000)=nil, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000400)={0x6, @output={0x0, 0x1, {0x1ff, 0x2930}, 0x8000}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x50000012}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) r7 = dup(r6) ioctl$KVM_DEASSIGN_PCI_DEVICE(r7, 0x4040ae72, &(0x7f0000000080)={0x10001, 0x8, 0x7, 0x0, 0xfffff223}) 21:06:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x88a8ffff) 21:06:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0xc3f1, 0x6, 0x9}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/108) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)={r6, 0x83, 0xd1, "b034d72f6226c14e415790d7357038b6281c01c44c56de14606f1f19055f35463473181c098a85593e518a2e9867ce0e18407e7fe87a2b580ed77b32fb95537d3c63c3013b503cb98dafb01b69c630f23ce16cf42b50c8646284d56bccd420c61ae98b315198b7634354e81a2ff824311afa80f3f249521bf9744e18983710d1ae224d0bbbf9f8a0a101f57dee08aea34d7f1ff6b55e8b2440c2e05cb08e228e5818282c2236b6e5ce474942855eb3f37117604d4e60f58d8c8707b866b913a062af702e2b9a7e94085e76a6f5b895a9bb"}, 0xd9) 21:06:08 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:08 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xc40, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xf000000, 0x5, 0x1, r3, 0x0, &(0x7f0000000040)={0x980926, 0x7aa5, [], @ptr=0x7}}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000001c0)) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000340)=""/230, 0x20000426) lseek(r8, 0x2, 0x1) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f00000001c0)) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x118, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040) 21:06:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x9effffff) 21:06:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) ioctl$RTC_UIE_ON(r2, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xd7bbb9e7) 21:06:10 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe7b9bbd7) 21:06:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0x9, 0x1, [0x6, 0x2, 0x0, 0x8, 0xffff], 0x101}) 21:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) accept$nfc_llcp(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x60) 21:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) 21:06:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xf0ffffff) 21:06:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r4, &(0x7f0000000080)={r6, r8, 0x3}) 21:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x8201, 0x2, 0x2b8c, r6}, 0x10) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) [ 960.657028][ T5148] __nla_validate_parse: 13 callbacks suppressed [ 960.657040][ T5148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xffffa888) 21:06:11 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x3) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)=0x6100) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TIOCNOTTY(r1, 0x5422) [ 960.910454][ T5158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 961.047806][ T5169] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:11 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffa, 0x6800) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000040)={0x1, 0xffff, [0x8000, 0x80, 0x73, 0x8, 0xb3], 0x401}) ioctl$GIO_FONT(r0, 0x4b40, &(0x7f0000000180)=""/168) 21:06:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xffffff7f) 21:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0x9, 0x1, [0x6, 0x2, 0x0, 0x8, 0xffff], 0x101}) [ 961.315705][ T5178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 961.464768][ T5183] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xffffff9e) 21:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0x9, 0x1, [0x6, 0x2, 0x0, 0x8, 0xffff], 0x101}) 21:06:13 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:13 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000200)=0x100, 0x4) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000680)=""/167) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000140)={0x8, 0x5, 0x0, 0x4, 0xc, "c654d0e5a58f829cc91f907505c00bba4d3bfa"}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r6 = dup(r3) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000080)={0x79, 0x1, &(0x7f0000000280)}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x22001, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000040)) 21:06:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x248, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49ae}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x260c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x50f4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2121}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe988}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x98cd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000800}, 0x11) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x87, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 962.828142][ T5208] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 963.058278][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0x9, 0x1, [0x6, 0x2, 0x0, 0x8, 0xffff], 0x101}) 21:06:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xfffffff0) 21:06:13 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) fstatfs(0xffffffffffffffff, &(0x7f0000000140)=""/36) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r5, @in={{0x2, 0x4e23, @broadcast}}, [0x1, 0x1, 0xc, 0x2, 0x0, 0x1, 0x1000, 0xffffffff, 0x3, 0x0, 0x3, 0x0, 0x6, 0xffffffffffffff00, 0x1]}, &(0x7f0000000100)=0x100) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r6, 0x4b48, &(0x7f00000001c0)=""/155) [ 963.404023][ T5230] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:13 executing program 4: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x150, 0x0, 0x200, 0x3645, 0x3ff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/158) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0xc31) 21:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 963.620205][ T5233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x40030000000000) 21:06:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) 21:06:14 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400100, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xc1, 0x4, 0x1, 0x6, 0x40}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/pid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x1, 0xc, 0x4, 0x4000000, 0x40, {0x77359400}, {0x2, 0xc, 0xff, 0x3f, 0x0, 0x1, "1200"}, 0x800005, 0x3, @fd=r2, 0x8, 0x0, r5}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f00000002c0)={0x0, 0xff8, 0x2600032a, &(0x7f0000000280)=0xffffffff}) [ 963.868176][ T5247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x100000000000000) 21:06:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x61c300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', r4}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 21:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x200000000000000) 21:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) 21:06:15 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xe48aa02, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x300000000000000) 21:06:15 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27) 21:06:15 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27) 21:06:16 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x100a02, 0x0) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/152) 21:06:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x400000000000000) 21:06:16 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27) 21:06:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:16 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x10, 0x2, 0x7}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0x6000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:16 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 966.218670][ T5327] __nla_validate_parse: 7 callbacks suppressed [ 966.218683][ T5327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) [ 966.469513][ T5332] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x500000000000000) 21:06:17 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27) 21:06:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7fffffff, 0x0) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/170) [ 966.749139][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73121edf17641ba7e00412a00000000000002c00"]) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) io_uring_enter(r1, 0x5, 0x9, 0x3, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:17 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27) [ 966.975185][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x600000000000000) [ 967.119354][ T5362] FAT-fs (loop4): Unrecognized mount option "sd" or missing value 21:06:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='vboxnet1md5sum\x00') unshare(0x8020600) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x5) r4 = epoll_create(0x5) epoll_wait(r4, &(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) [ 967.425612][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 967.580660][ T5380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sync_file_range(r3, 0x2, 0xe81, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27) 21:06:18 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x800000000000000) 21:06:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) [ 968.205165][ T5394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) [ 968.402210][ T5403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:18 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$GIO_FONT(r2, 0x4b48, &(0x7f00000001c0)=""/141) 21:06:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x900000000000000) 21:06:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) [ 968.601272][ T5429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 968.780134][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 21:06:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x1, @mcast2, 0xff}, {0xa, 0x4e24, 0xf9, @private1={0xfc, 0x1, [], 0x1}, 0x7}, 0x9, [0x2, 0x40, 0x1, 0x9, 0x7, 0x4b, 0x5, 0x7fffffff]}, 0x5c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e20, 0x36d, @private1={0xfc, 0x1, [], 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @local}, 0xb77}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x5, @mcast2}, @in6={0xa, 0x4e22, 0xae, @mcast2}], 0x9c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r4, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xa00000000000000) 21:06:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:20 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x200) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) signalfd4(r5, &(0x7f0000000040)={[0x6]}, 0x8, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x61c300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', r4}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xb00000000000000) 21:06:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="2f6465762f8d97d92873673000"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='ceph\x00', 0x0, &(0x7f0000000480)='\x00') r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0x9, 0xc, 0x183, &(0x7f0000000580)="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"}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x1e01, 0x1, "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", 0x1, 0x30, 0x3f, 0xff, 0x1, 0x7, 0x6, 0x1}, r5}}, 0x128) 21:06:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xc00000000000000) 21:06:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x3fc, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/fuse\x00', 0x2, 0x0) dup2(r5, r4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r6, 0x0, 0x0) 21:06:21 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xac, "b071a159b96a0de2bc11bd7592c4838b3d8a4e263dfd52c803b2e289825e61cc1364901b879da2585eb4f98d7066bc2cf1042decdee9af2b1bb83b38ff8a7ab789a63aabd96598d8cf96d69a69616c7e63f34e3c56d212b8b418cd505de2ca5669cfeae1595c3ef83dc8371f76cfbf05cb6c647a4654539e890a4e646806bed5de061873bba37593e268f8275451bd4a112ebbbe491b842bca046838cfc8e0809072185f087a26cc8c5fd6d6"}, &(0x7f0000000080)=0xb4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r7, 0x8}, &(0x7f0000000300)=0x8) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000000)) 21:06:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe00000000000000) 21:06:21 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xff000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xf00000000000000) 21:06:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000000c0)=""/148) [ 971.403143][ T5560] __nla_validate_parse: 8 callbacks suppressed [ 971.403155][ T5560] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:21 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x3) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/154) [ 971.602697][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:22 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000000c0)=""/91) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000180)={0x1}) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, [], [{0x2, 0x6, 0x1, 0xffff, 0x100, 0x8}, {0x6, 0x5, 0x5f96, 0x8, 0x8001, 0x5}], [[]]}) 21:06:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1000000000000000) [ 971.782162][ T5575] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 971.952638][ T5581] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:22 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r9, 0x4b40, &(0x7f00000001c0)=""/155) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000000000)=0x1) 21:06:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1100000000000000) 21:06:22 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000007f, 0x10a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10098, 0x1, 0x0, 0x1, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80210008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa6d, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x4001) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:22 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)=""/155) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0xd1, 0x2, 0x9ed}) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x9a, 0x1000) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) pause() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x28, &(0x7f0000000140)}, 0x10) lseek(r3, 0x7, 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec0100000202050000000000000000000a00000228010a802c00028014000117cbd9ff93c0ba9d2f3384653f47b48008000100ac1b14aa080002000a0101021400018008000100ac1414bb0800020064010101700002800c000280050001002f0000001400018008000100ac1414aa08000200ac14142b0c000280050001008800000006000340000100000c00028005000100010000002c00018014000300fc010000fc000000000000000000000000000001380002802c00018014000300fc0100000000000000000000000000141400040020010000000000000000000000000002060003400002000008a173e0edeedf0e64c031a4000540000000013400028006000340000000000c00028005000100210000001400018008000100e0000001080002007f0000010600f90340000200001400028006000340000000000600034000030000a8000a803c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000000c000280050001003a0000003800028014000180080001000000000008000200000000000c00028005000100060000001400018008000100ac14141e08000200ac141424300002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac14140f0800054000000002fafe85d95389f22a09c426819a3c31c1c3e0b3e953b212a41ccbbc00b16c098c773287a1a31909f875608e73d81e250f8da49ca6e5febf810bf167b5c249a0b74e87817402b03d7fbfca611dae614bbe71b029e224c766e7119b8dc27693e38e97e9568cc639942df32679e269e1d38ca60b218b084098f800b80b8cb5c817dd2b611f12cf4614a66c88e21439ec2e21dcc0d5a44793a6863f6a81847c7d4a04b7a78dd0a99c6bd4664bc6c0bbcb762d9368e6a6eab7d4adff2e726aba6711690d44fca84fa1bfb1baf7f593f5b2b52e385e6ad31fa0ebc2f8a760d10ee73ca4fc9e122fb626d2b83e830e33170eda479ce681f70b81"], 0x1ec}, 0x1, 0x0, 0x0, 0x8040}, 0x10) [ 972.235917][ T5599] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) [ 972.398950][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 972.464989][ T5607] batman_adv: batadv0: Adding interface: veth41 [ 972.471280][ T5607] batman_adv: batadv0: The MTU of interface veth41 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.471292][ T5607] batman_adv: batadv0: Not using interface veth41 (retrying later): interface not active [ 972.472304][ T5613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 972.582431][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1200000000000000) [ 972.730839][ T5633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) getpeername(r2, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x80) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200140, 0x30) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x544f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$input_event(r3, &(0x7f0000000000)={{}, 0x16, 0xfd6f}, 0x18) [ 972.851790][ T5637] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1300000000000000) 21:06:23 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f0000000000)=""/168) 21:06:23 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x1400000000000000) 21:06:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x614081, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, 0xffffffffffffffff, 0x4d515000) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6000000000000000) 21:06:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getdents64(r4, &(0x7f00000001c0)=""/255, 0xbc) lseek(r2, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/168) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x1) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000300)={0x30}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r9, 0x4b48, &(0x7f0000000000)=""/147) 21:06:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6558000000000000) 21:06:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, 0xffffffffffffffff, 0x4d515000) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x84, 0x7f, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$x25(r3, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 21:06:24 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x4) 21:06:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x8100000000000000) 21:06:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/143) 21:06:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x88a8ffff00000000) 21:06:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x5000000) 21:06:25 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x1, 0x0, [], {0x0, @reserved}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) dup(0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @remote}, 0x152, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000000c0)='ipvlan0\x00', 0x2, 0x9, 0x5}) 21:06:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x9effffff00000000) 21:06:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x802) lseek(r2, 0x800000000000002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1ff) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) mmap(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x300000a, 0x80010, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x48542, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(r0) getrlimit(0xc, &(0x7f0000000140)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c9fdc91bb06778422baae37", @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf2505000000080004000a010101140003000000000000000000000c446a337f9d00ffffac1414aa1400e5fffd8000000000000000000000000000aa0800050064010102cf0a6dd3c58fe89816501686ce1ee85511775a7c36496c621c7a4a7d2e3d6faa9451ce0056c80db5a1bdc238c7b3e4ddb398fe2b64dd31fdc98470a474b9dfd3196d1b4871a157b0f3a7835dd4915e76d493da61add099aa57644be09e2178fcde93e89bd1705e0da3a5c2edf13f02cd314e4db21b23c84219b1e58af98801f5b251111733823d82e9720dd7d455a06024d746894481979fff2f1a7ae3a24d0bd6059de5717450e6"], 0x4c}}, 0x80400c1) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:26 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x3}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFNAME={0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0054}, 0x810) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r5, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:26 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe7b9bbd700000000) [ 975.757590][ T5799] batman_adv: batadv0: Adding interface: veth35 [ 975.802285][ T5799] batman_adv: batadv0: The MTU of interface veth35 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.922254][ T5799] batman_adv: batadv0: Not using interface veth35 (retrying later): interface not active 21:06:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) mmap(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x300000a, 0x80010, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x48542, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(r0) getrlimit(0xc, &(0x7f0000000140)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c9fdc91bb06778422baae37", @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf2505000000080004000a010101140003000000000000000000000c446a337f9d00ffffac1414aa1400e5fffd8000000000000000000000000000aa0800050064010102cf0a6dd3c58fe89816501686ce1ee85511775a7c36496c621c7a4a7d2e3d6faa9451ce0056c80db5a1bdc238c7b3e4ddb398fe2b64dd31fdc98470a474b9dfd3196d1b4871a157b0f3a7835dd4915e76d493da61add099aa57644be09e2178fcde93e89bd1705e0da3a5c2edf13f02cd314e4db21b23c84219b1e58af98801f5b251111733823d82e9720dd7d455a06024d746894481979fff2f1a7ae3a24d0bd6059de5717450e6"], 0x4c}}, 0x80400c1) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xf0ffffff00000000) [ 976.489171][ T5837] __nla_validate_parse: 19 callbacks suppressed [ 976.489184][ T5837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/52) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r3 = semget$private(0x0, 0x8, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) semop(r3, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETPID(r3, 0x0, 0xb, &(0x7f0000000100)=""/144) 21:06:27 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:27 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 976.820130][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:27 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x80000001, 0x5, 0x8dc, 0x5, 0x4, 0xff, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) [ 977.006516][ T5858] EXT4-fs: 5 callbacks suppressed [ 977.006535][ T5858] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xffffff7f00000000) 21:06:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x7fff, 0x1000}}, 0x28) 21:06:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x1, "bd7a88ac7511a3"}, 0x9, 0x1) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x6558) [ 977.428497][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 977.632971][ T5887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:06:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20000, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000040)={0x1, 0x9, 0x4, 0x40, 0xffff, {0x77359400}, {0x3, 0xc, 0x5, 0x6, 0x40, 0xf5, "959495e1"}, 0x93f, 0x3, @offset=0xffffffff, 0x7, 0x0, r9}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x1) write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0x0, 0x3, {0x4}}, 0x18) [ 977.684409][ T5884] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xffffffff00000000) 21:06:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:28 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 977.970550][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:28 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) [ 978.210669][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r3}}, 0x48) syz_open_pts(r1, 0x70003) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r3, 0x0, 0x0, 0x1}}, 0x20) 21:06:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000500)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000640)=0x49) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x1a2d, 0x4, 0x7, 0x3, 0xfffffffa}, 0x14) lseek(r5, 0x2, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x1343fc80, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0xffff}, &(0x7f0000000300)=0xcb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xffffffff}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000081b94659f8551e00000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 978.660643][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:29 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x4}, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x210080, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0xa87b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'lo\x00', {'ip6gretap0\x00'}, 0x50b}) [ 978.915194][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x428800, 0x0) getpeername$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x557b743a86c04294, 0x2}, 0x2}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000003c0)="13a91f2f5cdd28ea71765547d6d636645c192be2feb276bd1b55a2c1ba9a9da68d6b987730b86897e12ac8a799319b59c0e382da2ea817d37b0ba4097380132055ae29d7b3d2c712c6ea4799b99852b660bdd92d26305f55b03986d0d525e6e6830febf4e1aa13a0228f1467643ca516b4aa3e63a1913e57f4ddbc986a8cb9b8f805e21c3a8fbcec79e92d2e0180c8d676f56fa11df655f51484fbefd690977560a81c7c852fa0a426fa3571e0d2b7d521274908971c0dca7d7271fcc1a35b54ab2931f06c0773ce28c5646434f7f96b85d48136f2dacb89d2", 0xd9}, 0x4004) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 979.198600][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:29 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008860) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:30 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x125c00, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000580)={'nat\x00', 0x0, 0x3, 0x4c, [], 0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000500)=""/76}, &(0x7f0000000600)=0x78) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040081}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@ipmr_delroute={0x3c, 0x19, 0x200, 0x70bd25, 0x25dfdbfb, {0x80, 0x14, 0x80, 0x5a, 0xfd, 0x1, 0x0, 0x7, 0x3b00}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x1ff}, @RTA_MARK={0x8, 0x10, 0x7ff}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000848}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="000007000000000000f8a44d59a063c2780000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x200800, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000680)=@req={0xfff, 0x1000, 0x2, 0x1}, 0x10) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002c00270d0000000000ce857349000000", @ANYRES32=r2, @ANYBLOB="00000b000000e0ff0a00000008000b0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) 21:06:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x800, 0x6, 0x4, 0x4000000, 0x4, {0x77359400}, {0x5, 0xc, 0xdc, 0x3f, 0x5, 0x9, "a130cbd2"}, 0x0, 0x2, @userptr=0x3, 0x7, 0x0, r1}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:30 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x4}, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x210080, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0xa87b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'lo\x00', {'ip6gretap0\x00'}, 0x50b}) 21:06:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f00000003c0)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x10}, {0xb, 0x6}, {0xb, 0xe}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) 21:06:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x44, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xce}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3e, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x48000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x3, 0x5}) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000300)={0x5, 0x70, 0x4, 0x3, 0x1, 0x0, 0x0, 0x7fffffff, 0x80000, 0x12, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfff, 0x20}, 0x8060, 0x80, 0x6d5, 0x6, 0x2, 0x40000000, 0x4}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x400, 0x0) pidfd_getfd(r5, r2, 0x0) 21:06:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 21:06:30 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x5, 0x81, 0x3, 0x40, 0x0, 0x1, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0xb0e47926981596ba, 0x4, 0x8, 0x2, 0x5a, 0x10001, 0x1}, 0x0, 0x10, r3, 0x2) r4 = clone3(&(0x7f0000001340)={0x28b0100, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x33}, &(0x7f00000014c0)=""/4085, 0xff5, &(0x7f0000001280)=""/80, &(0x7f0000000280)=[r1], 0x1}, 0x50) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x7, 0x1}) ptrace$getregset(0x4204, r4, 0x105, &(0x7f0000001480)={&(0x7f00000013c0)=""/133, 0x85}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FIBMAP(r8, 0x1, &(0x7f0000001300)=0x80000000) r9 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x202000) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f0000000040)) 21:06:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xc}, {0xb}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 21:06:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpgrp(r3) sched_getscheduler(r4) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0xe00) 21:06:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007329bc1c0be966710048000229c6090032d0ed64f3c3745aaf6e00000000000000000000000000000000000000000000000000000000000000000000000000005cbab134c63d227fe02e200000d5fa8a7250f15dcce11ebd5d3b5bba3e1d2766a56eb12565d2"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(r1, 0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x121100, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000040)={0x140, 0x14, &(0x7f0000000300)}) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:31 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 981.654414][ T6069] __nla_validate_parse: 9 callbacks suppressed [ 981.654441][ T6069] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 981.786734][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 981.817112][ T6068] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="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"], 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='\x00', r6}, 0x10) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000340)=""/230, 0x20000426) lseek(r7, 0x2, 0x1) bind$rose(r7, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @bcast}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 982.193545][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 982.525346][ T6090] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 982.571780][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 982.603328][ T6089] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 21:06:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7401000000000000005a932592aceb387500002300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:33 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 982.840804][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 982.938870][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:34 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:06:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5502, &(0x7f00000001c0)=""/155) 21:06:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=r9, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="c8c53309ca68bcbd1e8ce5bf3b6cccd86ad5685e501f2477d912307ce6e1dec65e4c7cad1c3cc9bf93b58398b76fdfbe2e65fe2659b2b84ba8d303492f8c4ba4c6584214d88a855ca24ef63bee770707f9f1553a1d898c874bdce8e7414484602e3ee751e0a9d437a3b0b8e344a76c01a974a16991e7c3d9f1e61ba1b324390f78cd097cfcd5d2cdc35e266cd0ae118f3bab8379fb8d95d138ea0e4eb7da8a76efd3aab9be1b8c83519486d7512f9896b5e7f687d9f10473786e6c1484b62af675b99a2fd239de0a8b59c38a558f6fe6b4d133387e14be6781a5b70934386707ec20de95ecc1a4974c7860836919b29416920b", @ANYRES16], @ANYRES32, @ANYRESOCT=r5, @ANYBLOB="65ef6edbc8cfd281104f192bd074375c83897c8c0efae1c033f9da838ba10e60c96ea2e3d7f84137fc14eb909f2121a13270a375514afa4a6bf8bdb769c4a20ed99f7465d41159e6ef5b23d8ec5b2ce40238984854a8050e66ff86b2441b3a6cce2d1cc83e56b89d1beac549ecd7e4295741693462f86afbba02d3ccaf502f76f00e4cb04069b114e5673f07bd5dc49245b1fa630d8451678815f96a3d8f088f6d31543a7940c9d244fc7adb4058c58410b7bc8e1fe26b504ab9", @ANYRES16=r6, @ANYRES16=r7], @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007", @ANYRES16=0x0], 0x6}, 0x1, 0x0, 0x0, 0x2400c401}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef6700000000000000000000000000000000000000000000000000000000000000003d392f900000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x9, 0x5) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 21:06:34 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xe48aa0200000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:34 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x10, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:06:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005f100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x81000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000002c0)=0x1000, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x10000000, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff3}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c081) 21:06:34 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fff}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7da}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r3, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@deltfilter={0x4c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0xb}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}, @TCA_FW_CLASSID={0x8}]}}]}, 0x4c}}, 0x0) [ 984.430790][ T6149] sctp: [Deprecated]: syz-executor.5 (pid 6149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 984.430790][ T6149] Use struct sctp_sack_info instead [ 984.444531][ T6156] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 984.495179][ T6158] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/5' not defined. 21:06:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x33b, 0x8000, 0x40, 0x1f, 0x4, "97294b66dfa832f0ed726d04a8232b0a5b9777"}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:35 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='s9\xef\x90\x1aL\xe2\xde\xf2\'\x17\x8a\x8a\x1b\x9f$\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb', 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) write$binfmt_elf64(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000ebffffdeeb7bba00281293bd5d74dafc20380003"], 0x39) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') [ 984.606222][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 984.612431][ T6149] sctp: [Deprecated]: syz-executor.5 (pid 6149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 984.612431][ T6149] Use struct sctp_sack_info instead 21:06:35 executing program 4: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)=""/155) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 21:06:35 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1002020, 0x0) 21:06:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ff91be92e11d68283675a95550ed05490128aa6e3235c497bd4600000000b83d367a4693d1487d699420b9b23247b183d44f1b2f04f92eda2ec31b2e6b99119eefda5719e8f1ff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r6, 0x717}, &(0x7f0000000080)=0x8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONT(r7, 0x4b48, &(0x7f00000001c0)=""/155) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x224400, 0x0) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000340)=""/230, 0x20000426) lseek(r8, 0x2, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000280)={0x7b, 0x0, [0x8, 0x6, 0xffffffffffffffff, 0x1]}) 21:06:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_pts(0xffffffffffffffff, 0x0) 21:06:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x2c}}, 0x4000004) sendto(r1, &(0x7f00000000c0)="c061f9f18cbcbaf9a38da42fe25e4ad113dec0d65a750623e622d72eb8059a", 0x1f, 0x20004000, &(0x7f00000002c0)=@xdp={0x2c, 0xc, r4, 0x39}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(r7, r8, 0x0) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000140)=r11, 0x4) 21:06:36 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 21:06:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000000c0)={0xc9, 0x0, &(0x7f0000000000)="890806c7ea1f7c716526052cee199c5e260079b49975cbeb3a84048e14a8af90c6e41d3daa3792a07a5eb23b0550fe45dae932a9990508b1df04e47f1eadf7ec215e1f0e048983d9535ce0aa2df028226b4dcc68bd737d9e18583fe892cdeb9f04ec9c77cf4d575acbc9c75fac79574d26ac0eb280f7730f6a7271154dcdcc690cb19722602cadf61ed23782c02fd869b7c8", {0x8000, 0x6, 0x3831354f, 0x2, 0xd7, 0x7, 0x40788ee0aebebb61, 0x2}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b48, &(0x7f00000001c0)=""/155) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000002680)={0x274, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62705fda}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ebefb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32153328}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d85756e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d45f361}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd023e1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x346d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33ed755d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60572b01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf158}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9162}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1c2}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf682}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb34a2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf570}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ef7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4929f84e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x601e91bd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5923ae11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd836}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ac6b6b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3125}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8c3077}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fef1a73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x937d5c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9c8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe503}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48624494}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8072}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66ba9bb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd78b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c794e74}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0xba37a3daea27acde}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8c973ff}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b32f505}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cafd54c}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7341ec29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba02e0d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2052c3fe}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000840}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x184, r4, 0x200, 0x70bd24, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d35eff}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46b55621}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b69fd6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeee1ec0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77f6fa88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x699cbd6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18bb91ac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5425b7df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22611a06}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73371d03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51539bce}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b73e842}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2899f19d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2626d65f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008050}, 0x11) 21:06:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000000)={0x2, 0x20, &(0x7f00000001c0)="b6dd7769957c60386e26806dba8fa3fa2c77b4457ca86840edb483cb32f482c35dc9e2da5e99fe54f2905d49316b1de11fade1b25b66721179bbc44c1d79f19320fb285c997b609d07866b1fc150c0874d3a904e6ad95c81a630c55bfb79cd457b6ccf61fe3bd8696eb3dae93a4186517b89ef501bbd0f2f35130ff50c2782c23090c8afc475266b89e6d38afdd1f10ef024ff1b58386d5c722714b7768b304241db2d3099b2d7dca61fdb41620e761506582a9d66a88ee71f16fe091e1442e087e8a0e2e63470c48e8a165871d9ce99c62aaf3473668f0fb6108ceb19c57e2d647c0ff566ffa8", {0x401, 0x5, 0x30314247, 0x3, 0x800, 0x5, 0xa, 0x7}}) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x230840, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000180)={r5, 0x0, 0x1000000000000, 0x1000000000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x18a00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r6 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:36 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getuid() r1 = dup(r0) socket$tipc(0x1e, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101000, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x8) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) write$P9_RLERROR(r2, &(0x7f0000000140)={0xd, 0x7, 0x1, {0x4, '\xda&[['}}, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) sendto$x25(r1, &(0x7f0000000180)="856f62d335d36880d1b75d571c94a4aeaa786a8e4bbd866a5799d520c7902e01790bff11a7cb21891b7fd814cba6bf593a29a58e83b22779f0aaad99322f1eaa0e7b8a4d86ac305a7ea6045d44f3131c7cc1d14119d5ea2e535cc73ebc88a351d92810ca1a6d11ba77ce4ab741930f524944511fa20e63352d2e0d6c1ccd2101d9027c6ee9befae8ea062bef5707cfa45d37deddce274dbb4b88ef7c2e24d066c54267f4ab6b4db23384e8b381bf325a8cb4d95078cff8cc98d3b07ccf498767f5d442436cdf628d2a38c82df4d3bb62c038", 0xd2, 0x4000, &(0x7f0000000280)={0x9, @remote={[], 0x3}}, 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote}], 0x10) 21:06:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_pts(0xffffffffffffffff, 0x0) 21:06:36 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x16, r0, 0xfffffffffffffffb) 21:06:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7, 0x800, 0x20, 0x0, 0x0, 0x9}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/151) 21:06:36 executing program 2: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x88c0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6e725f626c6f636b73a11f1c3d33362c736d61636b66737472616e736d7574654e"]) 21:06:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 21:06:37 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) sendto$rxrpc(r5, &(0x7f00000003c0)="077afde31c616ae8fe5e274ee8eac5ce6e5f25845b7a66111c68204283ebea4c2248a53c8632e47572a97f2bd5e06e604241757f3d17a901615ea506ab5806a05b457e0b000392e6ae13f1ae3c7ce419a14d922697cc9f9da1b7c19498d3d563a7b45b740efc165b1e064a94d9ed836aff21fd0fd5ddad008940008c6f7e3ed174a9585544299d0421686902a132ab22abe989b71b8830173dbcbe45bff11850164d997ddf3edd16401ba84ab66318428767e7f0e8", 0xb5, 0x20000004, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x24) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="a23c5e0fa2b340af000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000100)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000380)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x149900, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) fallocate(r3, 0x11, 0x0, 0x3a9e8b14) sendfile(r3, r4, 0x0, 0x11f08) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000000)={0x8, 0x8000, 0x6, 0x101, 0xfffffff8, 0x7}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r7, 0x4b48, &(0x7f00000001c0)=""/155) [ 986.762920][ T6260] tmpfs: Unknown parameter 'nr_blocks' [ 986.845495][ T6268] __nla_validate_parse: 3 callbacks suppressed [ 986.845507][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x2, 0xff}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 986.975756][ T26] audit: type=1800 audit(1588194397.396:172): pid=6280 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16066 res=0 [ 987.039240][ T6269] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 987.061314][ T26] audit: type=1804 audit(1588194397.396:173): pid=6280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir468468112/syzkaller.qUFgfw/990/file0" dev="sda1" ino=16066 res=1 [ 987.099554][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:37 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x16, r0, 0xfffffffffffffffb) 21:06:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x8, 0x204, 0x8001, 0x80000000, 0x32a, 0xe7a4, 0x81, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000002c0)={r7, 0x8}, &(0x7f0000000300)=0x8) 21:06:37 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb', 0x0) write$binfmt_elf64(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000ebffffdeeb7bba00281293bd5d74dafc20380003"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:06:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000000)=0x1d5b) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 987.374755][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 987.397930][ T6296] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 21:06:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="9ed155a97f6a241538d53e6701ff9bfaff8600ff7fff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) [ 987.642101][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 21:06:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000000c0)={0x9}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sysfs$2(0x2, 0x6, &(0x7f00000003c0)=""/190) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) socket$inet6(0xa, 0xa, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:38 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x320000, 0x0) ioctl$TIOCNXCL(r5, 0x540d) [ 987.881075][ T6325] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 987.888375][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 987.902741][ T6325] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 987.961662][ T6325] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:06:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x4000, 0x0) [ 988.033061][ T6325] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 988.114658][ T6325] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 988.139518][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0/file0\x00', 0x400800, 0x20) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0xfb, 0x3}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) read$eventfd(r4, &(0x7f0000000140), 0x8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000843340006f6b577d4eaaf2000007"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x7}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 21:06:38 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x16, r0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x16, r1, 0xfffffffffffffffb) keyctl$unlink(0x16, r1, r0) r2 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/sequencer\x00', r1) keyctl$update(0x2, r2, &(0x7f0000000180)="f65a", 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x10001, 0x81, 0x3, 0x3, 0x2, [0xed9b, 0x6, 0x7, 0x9], [0x7a2, 0x9, 0x0, 0x9], [0x4, 0xffff0000, 0x80, 0x2], [0x6, 0x0, 0x81, 0x101]}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) socket(0x2, 0x80805, 0x0) [ 988.588093][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 21:06:39 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='s9\xef\x90\x1aL\xe2\xde\xf2\'\x17\x8a\x8a\x1b\x9f$\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb', 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) write$binfmt_elf64(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000ebffffdeeb7bba00281293bd5d74dafc2038"], 0x37) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') [ 988.869694][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:39 executing program 0: setrlimit(0x7, &(0x7f0000001880)) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 21:06:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7a1a55a9086a241538d52667f9ff9bfaffdd00ff7fff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00), 0x60, 0x0) 21:06:39 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xff00000000000000, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:39 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x28) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f0000000040)=""/168) 21:06:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="cc1f29fd489cca5d604217523a", @ANYRES16=r5, @ANYRESDEC=r7, @ANYBLOB="0d31d45021d3261dfc025a87b004f2a1f4c3b83e4358c91cd54651a92e93e461bf141980fc7a6b9e773a3b1b417480f524d3cab341e20dd936d464b192cd27fb96bbacab9294aa032ee9b40aca2f94c44f3b1a6df0f23c7666f23dc60d8ec4963c099375cdfd90921080bde50bbd85c193cb0666806ad5b4d648bdf93418802410fca495689a19070c2d9faff91470d09af2a1f1f45abaae02aeaf310447658042d1c2459c4acf52c367ba1c9a27fde820", @ANYRES64=r0, @ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYRES64=r10, @ANYRES32], @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:40 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x164, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5e3d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x266}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xec}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe952}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf37}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x840) 21:06:40 executing program 0: 21:06:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00992d4a3090f9f6cf950000000000de00280012000c000100766574680000000018000200148c254661c28aa7a726ab", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00001700ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:40 executing program 5: 21:06:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0xffffffffffff0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x8, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x20) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 989.821513][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:40 executing program 5: [ 989.869614][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:40 executing program 0: 21:06:40 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x80, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000001c0)=0x3) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x2be5, 0x400, 0x45, &(0x7f0000000100)="c4c7685f36d28dea8f2c85770ddf4f0cfe0df8af111cbecd7df18115dfb1d39a5f7d23b6da4fc62e7f7bc430be0e5ad4cf90f43989d06198869d0c9cd3c447d400c19db80b"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b48, &(0x7f0000000000)=""/155) 21:06:40 executing program 5: 21:06:40 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482f, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x4002, 0x0) 21:06:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x805) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r6 = fsopen(&(0x7f00000000c0)='udf\x00', 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(r7, r8, 0x0) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="090000000093034a1e006fd5bbb5c7bb59df05cc6ee81219154a8d6ae9ed430f13f99b5b66e312592a3355e46ede8bcedbcfc62b416e1ac09edb77fd0fa02425bccdec3e39212dad81020a57638292099c7ad7e020d4bc7b2624fb34730298b6f84ce5ebf5a8ef4b9ea76c02bfec3407a3128276f19c2b6f68779aa4b03083720d248ff1b4db94db9a5028f7b482d7143880ec55508bb12293be11fc8836634e35c737229d98702357e5bffec4a0354464253d0a16fe9a5a0a2f80c2f0bf1cc7d3f06f12994371e905d08bc65bee5cde000000000000000000000000000023828f6c804abf2c188b466c69a2b5bab63f696e17805b3df126009619884424420dd9e18fc7046b838ef1831273293ca8385af7b3f4e60de4155350b3c630f736fac74571843887ffbd89f60c823a4cb76d7ffc98b9f1992a58e510a84f67649233fb6f31e92ece2deac9eaeb90fecf8ef3418836504990fe53ed1c184e43352e4db890c659498320260bb1b6a3e3e1fc1fc64e06d1c04b06b0fd324e0aefab7d46135bf76c72b9b810806c980084e311afc909a33d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e23, @loopback}}, 0x1ff, 0x0, 0x7fff, 0x0, 0xdc, 0x20, 0x22}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={r12, 0xffffffe1}, 0x8) dup2(r6, r1) 21:06:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0xd}, 0x10) dup(r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r3, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:40 executing program 5: 21:06:40 executing program 0: 21:06:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000800577d4eaaf200400723ade09f3af0ea8fdae254c8765846a5d25e5ddb518ec951b015ce950cc7ac030ece9871af5f966778a901d0398fb33b8132a580da730c10f94b1e5275851a7bacf2a7d337f22b6392e37a943d646e0dcba78e35e8b8544a5ba96339caf950ad1370fc9bf4b660b680a2e732d9aeeee54f4fd40aabd660d6d40407f5e48777351ebff84e7e2e22cf7cf0b70c03af4a5768c5f86474d234a1783705d3252ed5d1f68c528ce6baca64adb43f63aef64ff2aa2995cac2d62f32638dc29937a6d3d56d421f7c8cefc30fcd1737e18da5dad5ad8f1131f26b4c0ea9ca237a56b3801d293fa5f649"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) epoll_create1(0x80000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d000000000000d36107c00000", @ANYRES32=r4, @ANYBLOB="00000000000000000a0000000900010072737670000000000c00020008000200ffffffff"], 0x3c}}, 0x0) 21:06:41 executing program 0: 21:06:41 executing program 5: 21:06:41 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa483c, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:41 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x20}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r0, @ANYBLOB="0200030084cc145027a14247232beb3648a76bb1f8c4e3eb20d6326ef19a64e2b5e3a3f2a7147ef8bb9c2fad0d8610295b4155f036522155cb5c562768d36d27084cb940aed19617a41fb19737372e61586e215da384fed7786c6c98002fca90eb544ab7cadbaaebaba35549a354c38d6ef8de3e3ae56aee706cb93d1b01b750d72b6662fcd87575e988ef0afde64ce851d5a277c29b6cb342e3ec00"/168, @ANYRES32=r2, @ANYBLOB="02000800", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="040003000000000008000600", @ANYRES32=r8, @ANYBLOB="10000300000000002000040000000000"], 0x4c, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r9, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x49}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40015) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x220101, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000040)=0x200) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000000c0)="0485a157ee3fd04b7fd7cf3ba77df89fd57e9fa1cc66431577e1c4e974a57e90442e6a5ef6dd65927cbc7ca92160c88a5b7add4b477cad132f539a7a34ce5435700bd5d35f186cf0da60736f4848d65f30f66b27808e6183b80f474ddfa06cc37d48a0b4841fe135a8ad52e0257c80f33a1af47079dcba5f031d106bb28fafa45f36a2d24fa9c3197caedb7b8f934576fc72726007d7304b", 0x98}, {&(0x7f0000000180)="03452433e69ea40ee87ad086f4a87c1ada3488a33ee35f23342445af3b25534d04a52f82e1b8ebfcdf787db41fe073d36fab9a7e48f72f3a02d900982c8771cb73295265f049ff1322eb1ec297be0e87f84384db30bda82472a8143357e4a7d83c6d4b0019a0fcd0ca91d963fea555ad2a8b3548ecb3ab85a0b79d1703f83d53232173fd6dba5594c70259c22fcffad699c8a5d8f7262fe3464d88aea3093ea52995cf5ebe79c046b35d5f5e8f924af5574d8ae04e95b201e6b2a8a48e719db7e3ff772447fb06a5815c9dd13a5b28d49e09ac9a44364a40c6cfc36f4a7161d9fa9fa1652615419d772500bf66e5bd4d0205", 0xf2}, {&(0x7f0000000300)="0a81102ece042a236e76841ac182aba2b455e41fd3e78afd1b2c80ed0fd965bcd7222bb918ff1e86cc5e207c1c8f2b892234056058cacc72e705b0c84229c4c8b94ee337b0e3fd217e9e313f2a0b818a9933b825e071c7bacf85482c", 0x5c}, {&(0x7f0000000380)="79ce1e8dab37f17d42adff8e8fea72d371d86a7b74efc45b03d12f676c80c8932efef8db3dab896db2de51c8300812e20ce7c890e320731c0c3b711867634746317c2c", 0x43}, {&(0x7f0000000400)="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", 0x1000}], 0x5, 0x9) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r6 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 21:06:41 executing program 0: [ 990.932857][ T6507] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:41 executing program 5: [ 991.054028][ T6512] batman_adv: batadv0: Adding interface: veth1753 [ 991.060479][ T6512] batman_adv: batadv0: The MTU of interface veth1753 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:06:41 executing program 0: [ 991.173753][ T6528] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) getdents64(0xffffffffffffff9c, &(0x7f0000000100)=""/193, 0xc1) lseek(r1, 0x2, 0x1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0xd01, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={r9, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0xa16c}, 0x90) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/155) [ 991.265644][ T6512] batman_adv: batadv0: Not using interface veth1753 (retrying later): interface not active 21:06:41 executing program 5: 21:06:41 executing program 0: 21:06:41 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa485c, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:41 executing program 5: 21:06:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x1, 0x200}) ioctl$GIO_FONT(r2, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:41 executing program 0: 21:06:42 executing program 5: 21:06:42 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}, 0x7}]}) 21:06:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000000c0)=""/161) 21:06:42 executing program 0: 21:06:42 executing program 5: 21:06:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r7, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x20}, 0x0) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000340)=""/230, 0x20000426) lseek(r8, 0x2, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000003c0)="4b984fef9e2d339ea46411938235651b1d338bc05e8d9de21ed8c4ded82f8230d7846c0c18cbd177148dd2d8c793c824297bbfff155182204096fee030fcea61d58a59428ea544a0d7902f43c4a44e75d8ceb2d4883162fef3ee336605989845c338d74545fb5165c1517df4dc9a52027b583ea3dabb5afc581f1fc552c3d04ae6e3d78fef536122a6c29731af47f4232bc21f52322c3b787b4b29cc1aa91f9ac68a2b2f52c5f1a24d7184dfa25c140721c3418baef6a90423897ceb8d19aae08ded0a", 0xc3}], 0x1, &(0x7f0000004000)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r7}}}, @rights={{0x20, 0x1, 0x1, [r1, r8, r2, r2]}}], 0xe8, 0x1}, {&(0x7f0000004100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004180)="066e604c89df30c9cb475a22278b6569238fc3f50b13eb6133e56b853e09cd0003d8cfe56f2db223fb541dd1fdd2ce36a37b3155a54fca8a5074679f8a50771cc9ca9673d4e92c9fb756949621e01a48895836bc21bbb6ce6c0b558263ad169fc139be3455f6d562f24af6cef771eff329bfb43d75b5cc09a1fe363ab6a838304267ce7e26bb03fd024b2fb9d269465c2e41818b04ee4bfffbd6e1ad322f65d2cd6a2935048c4670c84146d614", 0xad}, {&(0x7f0000004240)="6904bd958f897db724e3d69af370b794bf7a9c09f20d6bd97a830e8e8ba045a6d33917f15d974da43510e0d7bd0a9eed602b92b00417b3d0350959090fb2160d1de810dc79109b1f09a70d6eead26d040a3c318d42e0efb30f564c067929b7f11969696077cada3e2175c2ffacd365586aab3a24391f9e6b24ccc9477ecea9328f29e6247b5b8cc2ce31012c6a9d23ccac990d5692765363328480b907f9160b3c01a656a66112c3dc4904e6987ef3cc2fe4c1289d53f570d49c8093f520a8ddc7fdb7b8fda00b1f774af8942e494fc33da30efbe433", 0xd6}, {&(0x7f0000004340)="a25c26429ee328b1601535b598cf7a7cd3adeb26eaea46d200952aa253753102fcc8525e9e2126885373c6f4c13c42640f1e8f76b5f52f2db4fe5514ff401e2497f3ed3a0032b2205e8eef7c14df5fc8e100c946d36a", 0x56}, {&(0x7f00000043c0)="1e", 0x1}], 0x4, 0x0, 0x0, 0x4008004}], 0x2, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:42 executing program 0: [ 992.037246][ T6576] EXT4-fs (sda1): Unrecognized mount option "commit=0x000000007b07838f" or missing value 21:06:42 executing program 5: 21:06:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 992.142647][ T6581] __nla_validate_parse: 6 callbacks suppressed [ 992.142659][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) accept4$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="040129bd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="740002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="700102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004003f00000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc01028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400feffffff38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004001f0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000008008000600", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="7c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c0001ee0ef400f4b7ea573391b6418e520b430024000100757365725f6c696e6b757000000000000000000000000000373a36cf000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040006000000"], 0x25}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x40) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 992.204454][ T6585] EXT4-fs (sda1): Unrecognized mount option "commit=0x000000007b07838f" or missing value 21:06:42 executing program 5: 21:06:42 executing program 0: 21:06:42 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}, 0x3c}]}) [ 992.336806][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:42 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)=""/4096) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80080, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x8, 0x2, 0x4, 0x80000, 0x7f, {0x77359400}, {0x3, 0x8, 0x6f, 0x9, 0xfc, 0x1, "6129f7f5"}, 0x400, 0x4, @userptr=0x7fffffff, 0xffffffff, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)=""/155) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x80000001, 0xffff, 0x7ff, 0x9, 0xe6b, 0x100}) 21:06:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0524fc6004000e000a0003000200c03737153e370a00118000000000d1bd", 0x2e}], 0x1}, 0x0) 21:06:43 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000229000/0x3000)=nil, &(0x7f0000227000/0x4000)=nil, &(0x7f0000e14000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e14000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) socketpair$unix(0x1, 0x2, 0x0, 0x0) [ 992.592104][ T6613] EXT4-fs (sda1): Unrecognized mount option "commit=0x000000007b07838f<" or missing value 21:06:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x95d707274e7d9d95}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x91) syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x3, 0x2c000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 992.808970][ T6623] EXT4-fs (sda1): Unrecognized mount option "commit=0x000000007b07838f<" or missing value 21:06:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0xfc21) 21:06:43 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:43 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) [ 993.291819][ T6641] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 993.397265][ T6647] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:44 executing program 4: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:44 executing program 5: 21:06:44 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x2}) 21:06:44 executing program 0: 21:06:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x40, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x10000}, 0x45018, 0x0, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) [ 993.748173][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 993.782921][ T6666] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x3, 0x4) 21:06:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 993.849863][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:44 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 993.907444][ T6681] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:06:44 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x3}) 21:06:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64af6e000085c1e4ebb5ef67000000000000000000000000000000f5eb0315781629705a3cb8fba3dcde0000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)={0x401, 0xb, 0x4, 0x4000e000, 0x1, {}, {0x1, 0x2, 0x1f, 0xa7, 0x9, 0x9, "0f26ce38"}, 0x1, 0x3, @planes=&(0x7f0000000580)={0x3cf5, 0x80000001, @fd=r7, 0x7a0}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, &(0x7f0000000300)={0x3, 0x1, 0x56}) lseek(r5, 0x2, 0x1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000140)) 21:06:44 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x2, [@datasec={0x1, 0x6, 0x0, 0xf, 0x1, [{0x2, 0x8001, 0x7}, {0x2, 0x7, 0x6}, {0x5, 0x20, 0x379a}, {0x4, 0x10001, 0x3}, {0x5, 0x4, 0x10000000}, {0x5, 0x95, 0x800}], "e0"}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}]}}, &(0x7f0000000080)=""/121, 0x7e, 0x79, 0x1}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:44 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000000000b70000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fd0000007fe8ff0000000000"], 0x48}}, 0x0) [ 994.324786][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 994.500146][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:44 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:45 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/19) 21:06:45 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x4}) 21:06:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x28, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x8, 'bond0\x00', {'ipvlan0\x00'}, 0x5}) 21:06:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) 21:06:45 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/226, 0xe2) lseek(r3, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) ioctl$RTC_UIE_ON(r2, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 995.141496][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r7, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r8, 0x4) r9 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000340)=""/230, 0x20000426) lseek(r9, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@raw=[@map={0x18, 0x7, 0x1, 0x0, r1}, @ldst={0x2, 0x0, 0x6, 0x7, 0x0, 0x40, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x3, 0x8, 0x1, 0x4, 0x10}], &(0x7f0000000040)='GPL\x00', 0x7, 0x93, &(0x7f0000000080)=""/147, 0x40f00, 0x8, [], r5, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xe, 0x7, 0x1}, 0x10, r8, r9}, 0x78) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r10, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:45 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:45 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x5}) 21:06:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x5523, 0x0) [ 995.374220][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 995.458990][ T6799] batman_adv: batadv0: Adding interface: veth37 [ 995.477554][ T6799] batman_adv: batadv0: The MTU of interface veth37 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:06:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 21:06:46 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 995.591812][ T6799] batman_adv: batadv0: Not using interface veth37 (retrying later): interface not active [ 995.655391][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="b9", 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000140)) ioctl$GIO_FONT(r2, 0x4b61, &(0x7f00000001c0)=""/155) [ 995.817366][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:46 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000480)=""/187, 0xbb, &(0x7f0000000540)=""/58, 0x1, 0xb0fd030c1d62e11a}}, 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {}, {0xd}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r8, 0xc0845658, &(0x7f00000003c0)={0x0, @bt={0xcb6, 0x8, 0x0, 0x1, 0x5, 0x3, 0x5, 0x80000001, 0x4, 0x3, 0x0, 0x6, 0x2, 0x9, 0x19, 0xd, {0x9, 0x2}, 0x3f, 0x7}}) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000300)={0xf175, 0x32f, &(0x7f0000000140)="af5a78e15800f9739240dd63d4d80282a1da4fd44de7218badae8bfc004a028fcf07da6e", &(0x7f00000002c0)="4011f3d7558996f5c8c530e15466ac4173ffe0954bbd2b0afcb05c8e6c382a8748d944c3feaace276b6c84", 0x24, 0x2b}) 21:06:46 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x6}) 21:06:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) [ 996.172067][ T6853] EXT4-fs: 11 callbacks suppressed [ 996.172098][ T6853] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000000)=0x1, 0x4) 21:06:46 executing program 5: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="b9", 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000140)) ioctl$GIO_FONT(r2, 0x4b61, &(0x7f00000001c0)=""/155) 21:06:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) write$char_usb(r6, &(0x7f00000002c0)="83bdd3de5c9e1122ffa71938a10a70ecde6b572aec03769d40e4b1715201d39e850b9d56bfff7c12ac9a94cf54db50088bc43dbf9e759df9c5567e41a4a16498cd8318b238", 0x45) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 996.430558][ T6875] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:46 executing program 5: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:47 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x7}) 21:06:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x202, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='vmnet13ppp1em0\x00', &(0x7f00000003c0)="f14624ae448764a995e29f270f7ed42ee1a5b6743cd64db2e210fa231c202c12fce8df45a7e47c85ef65c3b79e6a953fd65f183695a019caa6158c07b017839774e510cbc15a795721f702a2f9ffc97808067bdde7939cd6e7c28bf9df4c786f61c69769650a15bcc44dab2769ac2e15513d1268851feabc404e62d126096b950883c6da75bf8d15f3743360150f233e64915ec9284070f622af6335e9425e2ec14531dc7e02e927d06aaba044b23def838df7490ff8cc02070dc13e845db3d29b62ea32d346c95834f3011cba1482caf4b3f7c007c9579fe6971caea08020222ab9d2a2b34baae9ad01181fdc2f5be0c73a4e64b74ff0e2f472", 0xfa) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024008b05000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x3}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="2b1c9b03a87c47f1215b000001eb16390ef5b0e1cf1d916d1bb9a8f80000000000000a0000000900010072737670"], 0x3c}}, 0x0) 21:06:47 executing program 5: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="b9", 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000140)) ioctl$GIO_FONT(r2, 0x4b61, &(0x7f00000001c0)=""/155) [ 996.934845][ T6906] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:47 executing program 5: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:47 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [], 0x8}) [ 997.260621][ T6919] __nla_validate_parse: 6 callbacks suppressed [ 997.260633][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x12, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, 0xee00}}) [ 997.494358][ T6935] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 [ 997.673711][ T6943] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=r2, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:48 executing program 5: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) 21:06:48 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)=ANY=[@ANYBLOB='ckmmit=0x000000007b07838f,\x00']) 21:06:48 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000bf40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000bf00)={&(0x7f000000b9c0)={0x538, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x5, 0x9, 0x5, 0x8}, {0x2, 0x81, 0x4, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x40, 0x7f, 0x8, 0x5}, {0x3, 0xff, 0x1, 0xffff}, {0x5, 0x7, 0x1, 0xac}, {0x3ff, 0x8, 0x81, 0x80000001}, {0xfffc, 0x80, 0xff, 0x38000000}, {0x3f, 0x1, 0x9d, 0x5}, {0x1, 0x9, 0x3f, 0x1}, {0x20, 0xc1, 0x7, 0x20}, {0x1, 0xff, 0x1, 0xfffffff9}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3f, 0x5, 0x17, 0x8001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xf3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6200e644}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x538}, 0x1, 0x0, 0x0, 0x10}, 0x4044) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$GIO_FONT(r1, 0x4b48, &(0x7f0000000000)=""/167) [ 998.398563][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 998.461712][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 998.472421][ T6966] EXT4-fs (sda1): Unrecognized mount option "ckmmit=0x000000007b07838f" or missing value 21:06:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c25df971afcd4eac3dafb40010000000000556b132a0d6958bdfebd4288405689fd33cccfd133e6cd2c66849e9238035e5e89561cf944b74370d5fc73334496e072e91f86a6c76f9d1dd3fc456008d27c6988509003d70a4d", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x0, 0x318, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x800) 21:06:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)=""/118, &(0x7f00000001c0)=0x76) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x529302, 0xa) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400203) mmap(&(0x7f0000a6b000/0x2000)=nil, 0x2000, 0x4, 0x12, r4, 0xcb94c000) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x11, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000040)=0x8001) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:49 executing program 5: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 998.726698][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:49 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$ax25(r1, &(0x7f0000000100)={{}, [@rose, @rose, @remote, @netrom, @default, @bcast, @null, @default]}, &(0x7f0000000180)=0x48, 0x80000) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 999.013319][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:49 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 999.063286][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 999.095908][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={r7}, &(0x7f00000003c0)=0x8) [ 999.179434][ T7010] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:49 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000000c0)=""/164) socket$rxrpc(0x21, 0x2, 0x2) 21:06:49 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 999.299746][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) signalfd4(r3, &(0x7f0000000040)={[0x1]}, 0x8, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880020008100000006000000a6b38761c1e9c725a7fa0d54fcae84b0bec990c0734cddf95b44d912fdb1512acd08763bf9fcdc2633ef7a3673045f31d7740fc9129c5b88fda7175b7aec61c761393faf269a7f6f3206366d4faa6c5b537fcb555e45f5a6c958ce12a4bae6c51a19bb60dae57ca29295815fe29b0de39287418a8a5d467e7bc4fe686ebbd2d500"/416], 0x1a0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r6 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:49 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 999.437552][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 999.469525][ T7045] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7405000000000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:50 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x202680, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000440)=""/135, 0x87, 0x0, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffffb, 0x480180) ioctl$RTC_PIE_ON(r7, 0x7005) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r8, 0x4b48, &(0x7f00000001c0)=""/155) [ 999.653201][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:50 executing program 3: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000140)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='./file0\x00', 0x0, 0x108300c, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000180)={0x4, 0x5000, 0x80, 0x8, 0x4}) chroot(&(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:50 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 999.822806][ T26] audit: type=1804 audit(1588194410.236:174): pid=7072 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1207/file0" dev="sda1" ino=15906 res=1 [ 999.897679][ T26] audit: type=1804 audit(1588194410.316:175): pid=7081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1207/file0" dev="sda1" ino=15906 res=1 21:06:50 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2e2f6669eaab79c09adb554846c34e6c6530"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:50 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffb0, &(0x7f00000000c0)={0x0}}, 0x1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:50 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1000.004942][ T26] audit: type=1804 audit(1588194410.316:176): pid=7081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1207/file0" dev="sda1" ino=15906 res=1 21:06:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x14000) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r4}) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x8b}, 'port0\x00', 0x20, 0x90000, 0x2, 0x7f, 0xe2, 0x2, 0x4, 0x0, 0xd, 0xa5}) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xd80c0, 0x0) bind$tipc(r5, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x4}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:51 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000080)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) creat(&(0x7f0000000000)='./file0\x00', 0x24) 21:06:51 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:51 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x1a7) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:51 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000080)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:51 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000080)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1001.111773][ T7137] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:51 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x80000000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7f, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:06:51 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000180)=ANY=[@ANYBLOB="636f6d6d695953cfe6b8c416963030300d0004009e046099137a960d56b216ca36522a99ffdb376c17b34a2e8a2d3e10cc52f0949cd6015625058bb84dc4daf1ccba45d488f5e770f5dd0ab25cfc44e0fada730ce504516b180df9342b3d4e2d3fa9c821ffaaa7d9fedb2375f3d67d22cf48c5e1ba8bc8f46c7e01149582293b75543ea82c3d90446147ef19676e80d430f84f57d6d382115db440ba9d4f8e6a29fdfa6fa9778c35324d217935a635a10ace2fdc52113ef36fa45ec338994b17e4fe9a297af497eee5a62484769a6503041664c21201ba832414b4"]) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:06:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f00000000c0)={0x2}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="000000000000003c0a0000000900010072007670000000000c00020008000200ffffffff"], 0x3c}}, 0x0) 21:06:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) sendto$inet6(r4, &(0x7f0000000000)="2af4405894e6cbed03e8f250e1d13eba0eebbd81f6cc5e74344a73deab2e08c2a88752bd", 0x24, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, 0x1c) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:51 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:52 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x240100, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000140)) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xd8ae, 'syz1\x00', 0xfffff000}, 0x0, [0x1ff, 0x1ff, 0x7, 0x1ff, 0x2, 0x7, 0x1, 0x2, 0x13, 0x32e93522, 0x9, 0x1, 0x80, 0x5, 0x3a, 0x7, 0xfffffffffffffffb, 0x2, 0x3ff, 0x101, 0x0, 0xaed, 0x1, 0x252a, 0x8, 0x8001, 0x400, 0x9, 0xffffffffffffffc0, 0x0, 0x4, 0x5, 0x4, 0xff, 0x0, 0x0, 0x7d, 0x3ff, 0x8, 0x620c, 0x7, 0x2, 0x8, 0x5, 0x8, 0x81, 0x100000000, 0x1c0, 0x5, 0x6, 0x80000000, 0x9, 0x0, 0x9, 0x1ff, 0x1000, 0x6d19c349, 0x400, 0x0, 0x1, 0x7fffffff, 0x0, 0x5, 0x1, 0x10000, 0x80000000, 0x3, 0x26f, 0x6, 0x2, 0x7ff, 0x400, 0x9, 0xfffffffffffffff8, 0x7fff00, 0x61, 0x7f, 0x3, 0x6, 0x1, 0x0, 0x4, 0x5, 0x5, 0x37b, 0x3, 0x8, 0x6, 0x1, 0xfff, 0x2, 0x955, 0x1, 0x0, 0x4, 0x6, 0xe2a0, 0x6, 0x9, 0x831e, 0x6, 0x100, 0xb9, 0x400, 0x3, 0x6, 0x400, 0x0, 0x5, 0x5, 0xdd, 0x7, 0x0, 0x1, 0xcbb, 0x800, 0x9, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fffffff, 0xc497, 0x9177, 0x4, 0x4, 0x6]}) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, &(0x7f0000000940), 0xc0, &(0x7f0000000940)=ANY=[@ANYBLOB="7362363078303030303030303030303030303030382c6673636f6e746578743d73746166665f742c6f626a5f757365723d6d696d655f747970652c6673636f6e8a6578743d757365725f752c61707072616973655f747970657d696d617369672c736d61636b66736465663d73797374656d76626f786e6574307573657276626f786e6574306b657972696e672c00f8986ce43336fd03bd7c974b"]) sched_yield() getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) connect$rose(r2, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x40) [ 1001.657187][ T26] audit: type=1804 audit(1588194412.076:177): pid=7177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1210/file0" dev="sda1" ino=16290 res=1 21:06:52 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1001.794868][ T26] audit: type=1804 audit(1588194412.216:178): pid=7177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1210/file0" dev="sda1" ino=16290 res=1 [ 1001.823820][ T7191] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 21:06:52 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:52 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="29839c8dd3ad4c7a3387ffccc1cfc1a6c0a731faef72ffb7f3b30502063e130000000000d6028685f83a77e1"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:52 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1001.926137][ T7202] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 21:06:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000440)={0x9, @raw_data="e2c94bf1acb830fa09d12924c556affdc564e0cadb35533437427466cbb47106e640573802c64d11535633e52aed110d255b5c13535d89e1ff6f0ec060a3898266c7328a2fd9aad87a62c78a4a81b923590b0afa691463ba6cbb7c01401a210d276df25791fef2ff4a9c650f34c90efe81adfee8a9a81c32450234bb2a2befcba3f18801c19844490aef3f67df2b183254fe6905ddefa9ead4511206fe128ce817d79c0aae2ab3caefb7e9a7cb52b6079b063b3e3d8bbc2f4e2dcfdfb3610b86af753fb6ac2ca57f"}) ioctl$int_out(r2, 0x2, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 21:06:52 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f00000000c0)={0x2, 0xffff, [{0x2, 0x0, 0x9}, {0xa884, 0x0, 0x61a8}]}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 1002.326528][ T7240] __nla_validate_parse: 6 callbacks suppressed [ 1002.326541][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1002.439970][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) signalfd(r3, &(0x7f0000000040)={[0x3d]}, 0x8) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x40) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000100)=0xfcd8) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:53 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:53 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:53 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2e2f66696c653025dee0599286a03806178edbd01d6943a94a7b443cac6ba0b8c45c9c455863c955e36840fa496d2d8ab5640e89126d5cad0cfaa5dd041da57802b9a1e9f6f80aeb22cf470a48dee66a7ed23a36b0d1df3b43e6c6d784a10dfa62169509d990a416f8426af49c9687c187b169"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4eb7fef6700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a309c949"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000a0000000900010072737670000000000c00020008000200ffffffff8baa65951688460dc523ed71fdac75267523c70d6de3d19ad05eb8ff26f28e22a98b6d5a860ea41fea5c5e571117f29d8292f94c333274ec105aa38ab35d01ebdb874d88e146bc895430fc0d5f3d8e8fd8ff29fed4142204fe1aa98f3220d20da47b349ad5abff41cb0987d407a5ddc3ac9d2d5672cc5128159f84f570e6576bc9f26cda1fde8e5bb066a14ed750607d1e5483e9b5d5766ec5e1827bf9e3ff185c4c8ad88934bee80456a342"], 0x3c}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r10, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @remote}, {0xa, 0x4e22, 0xd510, @private1={0xfc, 0x1, [], 0x1}, 0x8}, r10, 0x5}}, 0x48) 21:06:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9c000000f3a5023bb5", @ANYRES16=r3, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x3}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="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"], 0x3}}, 0x28040084) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000a00)={'nat\x00', 0x0, 0x20000004, 0x28, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/40}, &(0x7f0000000140)=0x78) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000007c0)={[0x6d2c, 0xadf, 0x1000, 0x80000000, 0x7f4, 0x4, 0x60, 0x2, 0x1, 0xcdbe, 0x6, 0xfffffffffffffffe, 0x100, 0x3, 0x81, 0x1f], 0x4, 0x40205}) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x1) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) getsockname$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x20) [ 1002.916806][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:53 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:53 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) [ 1003.108112][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x4, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x9}, {0xfff1}}}, 0x24}}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) ioctl$VT_RELDISP(r5, 0x5605) 21:06:53 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000340)=""/230, 0x20000426) lseek(r7, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0xfff}, &(0x7f0000000140)=0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) 21:06:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f00000001c0)=""/155) 21:06:53 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:53 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1003.421351][ T26] audit: type=1804 audit(1588194413.836:179): pid=7314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1213/file0" dev="sda1" ino=15765 res=1 [ 1003.422033][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) lseek(0xffffffffffffffff, 0x200000000401, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x40020, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) lseek(0xffffffffffffffff, 0x2, 0x1) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000300)) madvise(&(0x7f0000970000/0x2000)=nil, 0x2000, 0xa) [ 1003.482460][ T7314] EXT4-fs (sda1): Invalid commit interval 2064089999, must be smaller than 21474836 21:06:54 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000000)=""/156) 21:06:54 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1003.710102][ T26] audit: type=1804 audit(1588194414.126:180): pid=7336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1213/file0" dev="sda1" ino=15765 res=1 21:06:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) ioctl$GIO_FONT(r0, 0x4b48, &(0x7f0000000040)=""/161) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="b94820bb6649f2d640c353e6b616251b671c61d255936d18bffa0926fa21825f005cb93f3f7823bd316232caed9b59178a4615526257fc92fcabe302", 0x3c, 0xfffffffffffffffa) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/230, 0x20000426) lseek(r1, 0x2, 0x1) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x30f, 0x70, 0x8, 0x6, 0xff, @dev={[], 0x20}}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000200)) [ 1003.790875][ T7323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:54 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4c, 0x0, 0x2ab4c2f, &(0x7f0000000100)={[{@commit={'commit', 0x3d, 0x7b07838f}}], [{@appraise_type='appraise_type=imasig'}]}) 21:06:54 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 1003.961527][ T26] audit: type=1804 audit(1588194414.376:181): pid=7354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir468468112/syzkaller.qUFgfw/1023/file0" dev="sda1" ino=15765 res=1 21:06:54 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1004.073132][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:54 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1004.208892][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:54 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$notify(r0, 0x402, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000600)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0), 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000001c0)={0xa, 0x9, 0x200}) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0xffffffff}, 0x4) 21:06:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x6, 0x8, 0x6, 0x0, 0xffffaacd, 0x7, 0x44, 0x40, 0x20, 0x1f, 0x9, 0x81, 0x0, 0x3f, 0x9, 0x3, 0xd, 0x2, 0x5, [], 0x2, 0x7}) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:55 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000002040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x1be0, 0x30, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{0x4d8, 0x1, [@m_nat={0x188, 0x4, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x10001, 0x20000000, 0x60e, 0x4}, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x8000}, @broadcast, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x2, 0x9, 0x4}, @private=0xa010102, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7fff, 0x7, 0x1, 0xf99c00}, @remote, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdc7, 0xb7, 0x2, 0x4, 0x6}, @loopback, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x10001, 0x4, 0x8000}, @empty, @rand_addr=0x64010101, 0xffffffff, 0x1}}]}, {0x86, 0x6, "895bb8666e6163b5928c133daab58bd07419b17804f82d24b2b80d95bd0eb6474c5fb8d467962a1d9a0fed26583b760b3f9709c875662959fafa6dae2c30eb0896d926068425b9a9583c7d6bbbcc8898a527ee1d93f8179502118d7c571a51e5d12dcf676e72383a341f6e6adabd50db3bfa040a20a45ac5f3342b71dcdb623ee516"}}}, @m_vlan={0xc8, 0x1d, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0x1, 0xffffffffffffffff, 0xc0, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x86, 0x6, "6470048a99bfd515f09bff2a0fe707b4acf63517331e80638023e580aa5abfd43201103be081eb21f91501bda671dc3f5c3e037b03f55439dacb542f3633816a0a8c39bed94b58ac1b771c0d74f62f5468add6655df965b0165da744574db721a0fa810fe806987d5c116864171ed0435a86b5ba0ac32369a5bb3f8a764e227874ac"}}}, @m_ipt={0x1ac, 0x1f, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xa2, 0x6, {0x9a, 'filter\x00', 0x3, 0xfff, "aa33cc29241e7d798eac94e2318d676efe3e5ea36eb222af8ff6b49d9220b381799b1158386387f0abf414ea263495208a0f3d8d3e3ecee8b502d83a17802468b3e7a991fa06cb5bf062436876a3994189f0a0c2ca97e9839ddc716680f2cb5f2de7f6152fd656bb47bebba5b8163e10473e5a03cefe2991"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0xe6, 0x6, "a1015b2a38ced696a37c732f6c483542390e8c5e2c239fe9d3f73d545a34ffcb70dcde8db7261d33d3718bebbfeef9c210b0089796d3f1bc388f08b936862489f9cb6e62dcde3ba741917e12a7c127a5f30073a5f9d8b1d80a00bfe01a3f043c9910ce6ffff330164685cabac8479bc94ce06234ded1a50452db713834c893d11dfafbdcbd7b03e573a4a07a565409861067d29a67564711c73bbcca5e3a3aba55b6e5d1318b3748838a288daf53b56dc2d8c47b58996dd054a97ea768fb8fa923b007e35bbcdbe95ce8131b6ed5690a40078493bbe205f9f44b8272a24268218eff"}}}, @m_ipt={0xd8, 0xe, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xfff}]}, {0x74, 0x6, "06ee74bfdaca2a0889be093f527ae5f631b3f256a824be48cbe93b21a71e9efa8915d3b81e98e6450c8108fcfb01714830a9d97a42bc6544be982c72ec1fb4b61e42662f4799c41dea27b32ef8b226f324ba8196f345fed3ea593ecd45f0e3865e13fb8dbe5e6b285fab3e79beae414f"}}}]}, {0x1c8, 0x1, [@m_ife={0x148, 0x1d, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffeffff, 0xef60, 0xffffffffffffffff, 0x5, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="eab520235004"}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xcbd, 0x5, 0x7, 0x957, 0x9}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7ff, 0x4, 0xffff05fe, 0xfffff001}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xffff, 0x7, 0x7, 0xfffff801}}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xa6cd}]}, {0x9c, 0x6, "19cd2b3d5dfb9243d66984631b0a4f08a916adf008632e8bba8e73522cd4078d20e063563ebb51e83af2373500f0e93b066c651fb2aeb4f5ec219a63d9bb7e4bc5864707f943a6bbb2d4053a6589d0625ea90ffb9f167a572dd19b44a314c59ebad35701f7eb9815b598c0cca82abda3678c43725f60886f510b6735183ff41d4d2b5f7f46aefd14ce180f59d19604b662192c52d94b6fb9"}}}, @m_ctinfo={0x7c, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5ecdafb9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xc}]}, {0x40, 0x6, "8565687d194d7261e3c3cb319b3259edca3b39161e0de00269e62c350a8e04aad714fbde9c56e683e7521be3f1727dbeee3679ab49181ba4ce0280b8"}}}]}, {0x152c, 0x1, [@m_bpf={0x1054, 0x16, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xee, 0x10000000, 0x10000, 0x8001}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x1004, 0x6, "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"}}}, @m_ife={0x194, 0x9, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x401}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8001}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe11}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x100}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x7, 0x0, 0x64ca}, 0x1}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x233}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8a}]}]}, {0xf5, 0x6, "6cd28597a1ad23f0523474b5e00e534b6d4648760416d760b4fa02d5da872a0453e581c40e683b877bc8fbca25c1d56d329d465f5090113e559f99a51063453e1c3c5e7d0bb0bcf29d779ffbc160fd8284d1f384a4d2188f899557c86d49128c088c7773e80518b542fd03ec5c1693b3b478d9502470117c692ece778712dfe40a26bcb2858454b11791cbad2126780be149308ad94793f15943ec37e21ee7f49602cde9416dd8d1f3b54a714453019c90373df4af2157126780bf0140a017a11178f8dbb8eeaa5e06caedf24f7af6c3b3472816fb893a12f86cec3d13d1351b5e09ceb319e52ce54f8481d29f31b0e4a9"}}}, @m_ct={0xec, 0x1b, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={[], [], @empty}}, @TCA_CT_LABELS={0x14, 0x7, "48faae895af9d83021ef29cfbccdd928"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "65f4c693cfac9ae439be253a0f1a77f9"}]}, {0x7f, 0x6, "e52c999f009945938131f13c1feaf31386efd7102cccf6a0270e8f01e805a4a1a194c6a6df6605dd9087d81d7391815af683efad00e093497d9685678110d760752c82a54840a7fa5d271ffe0864dbcb01e4ed10da855dc50e7c781ca799bfa46b7de196b9be0b8c77231afcf7bbb018678140782b9ba1757c445a"}}}, @m_ctinfo={0x4c, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}]}, {0x27, 0x6, "cea4dd96210f9b5dd487c914b299d5a4342a2088a46c9a25abfc4f9755568df6382f60"}}}, @m_xt={0xb8, 0x1c, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x7c, 0x6, "e28fe31c031394a216e457790a3c0ccdc1196d6ad15fd35dff6dab6d88b8d88782e068c35b30b077614e3f95570c7966243dd8944afd404bb447be9bf13351d6553842e700e556b81ebba57636983c62b2aebeb8748e9f69f27d0ae97958e5640395a853fad155bdd8ca3c5225946910946c674375ccf328"}}}, @m_ct={0x150, 0x2, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_LABELS={0x14, 0x7, "78379852e1c169608b1ff5d5fd21eb58"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xf0}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0xdb, 0x6, "1e635ed8f3246592df90a0efa51b9e55052146b2276e1391b8d515b2e136ba65cd7e1b5e99b68579462fc84410135eb60731a94805a62e5cfe46d792c3b3aaa653d216bbc8f7c5cb38037fef967b29559101ac64f436c0b83d4740676562c4c08a20532d21962e9e63e41cafd2707ee3d169cf2a1a40f080d4291193209a3cca68e9fd97e77cdeae9dbae1eb50e2b3ae8f58867f7ad4ed99d2ee036b4b6e4361b45304a7f2571a85f9bf1e30ef6958fcc29454fbefcc456382b7ad13b9c1340b1ebf5d36bc5ac4c706a5602630c9c691e7912bd8acc5d5"}}}]}]}, 0x1be0}, 0x1, 0x0, 0x0, 0x4}, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000340)=""/230, 0x20000426) lseek(r7, 0x2, 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r7, 0xc0305616, &(0x7f00000000c0)={0x0, {0x4, 0x3}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r6, r2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x2ba482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x3c1c0def}}]}) acct(&(0x7f0000000100)='./file0\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {0xc, 0xfff2}, {0xffe0}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8c2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 21:06:55 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$notify(r0, 0x402, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000600)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0), 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000001c0)={0xa, 0x9, 0x200}) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0xffffffff}, 0x4) [ 1005.650337][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:56 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:56 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1005.723082][ T7414] EXT4-fs (sda1): Invalid commit interval 1008471535, must be smaller than 21474836 21:06:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1005.861961][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1005.892597][ T7432] Process accounting resumed 21:06:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="74000000e4aa284373ed4474b38000400000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) read(r3, &(0x7f00000000c0)=""/58, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 1005.930507][ T7414] EXT4-fs (sda1): Invalid commit interval 1008471535, must be smaller than 21474836 21:06:56 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1006.289856][ T7447] Process accounting resumed 21:06:57 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='./file0', @ANYRES64, @ANYBLOB="2645b79d85464e674b7c4d566e3e313f6db65e130eb63610aa97e9d165a87ead94d8b365b753e08f9a2666f1b7df37e8f7b8e5bbf92373f2962b8e962e7319ecd4610d810cc34ce5086b78ea390de941959c184294"], &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1083004, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) lseek(r0, 0x2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="135940330b159f8605af2b013e2538d17e0f594c552809758ffa5579d34101a63b42b9bd6756e8fe8da6db7a37b1ab29a4758b18477c3993c1b003109274a69e057dd57cd09052145067fcc5b81a49235559e0343ce0f780562302ba8640ad035243aee8f68d540980a6e34e3974c7802b52e01468f269e1f29dad97b6016218ed15cecffc03b62456a8a403", 0x8c}, {&(0x7f0000000180)="238ead95ab", 0x5}, {&(0x7f0000000240)="2c41a6d6d641f151da319b93a42023788125d4afd57cb52441bdd0cb6e8bcb8d110a65e4237689fc16888766728e5f399ff7", 0x32}, {&(0x7f00000005c0)="a5094ccc4038fee5e60547d5e96630af9bef05cba87130da480e275cd0150e1f6b0ad262373c256eb3fc50a2164e1ab12ced57b91aa4fce0b392e08cc819d60af545ca7fb378569bb93719326eabd95077464242d92b3806386104f12820ef4710eb486e38d7001a517a5c59f4cbf08d81d7e00e531087f9242afc0aed8694aacb745b48b8ae4cb2db0f0db34445ebc4cd3d14731ede0aff87bcd6c2ea7789943b199a5870390ed59d73ecaf81", 0xad}, {&(0x7f0000000680)="edfa0a55aadfe8d057c9603cbd76675afa5aebb5eebead8fd2be309af7a4f17ed57f4d3a3024eda6e62791833622c4ae3b497a4f2576755ee4ea19ff5c55d083eb8f71b6f13f21b8885b96fd55f68eb4bb1869386ecdbf1000124c54048a853ca673babb5ca838aa6d22ad3f4626009fe2028e275f21e2553bbd339c3e43903b6b7bc9a9d07c7331c45c92b1b4f36fbad6b4316e5ca3713f1f3c82b5e0b7b94275c14c58491b9f1d2c9734229d03e0aae3cfbb3f66bd9c91732296292894a26c445fce44cdbadb2023223d459035a79ebe2f1f68d0b15daa29061c12", 0xdc}], 0x5, &(0x7f0000000800)=[{0x90, 0x115, 0xfffffffd, "96126270472aea050f9382772b6027913265bc3ff05dd63cc0d59b29f7762b867279565c4b738e9924afcb36f8304d915c21ecc087facea0f9f132c33b7d1f24d28101f469aa981fa2a29310592a86dda8e8a738dc4beee94ccc92d35e6cec38f399a63fa409f8b30f9d09d15489aaf13d889a038e44b61e3157"}, {0xc0, 0x111, 0x100, "eaab974868f153c7219f4eefe61dfc429033dcbfc2f2c50379b33f5970ee190df18fbd86799bebfffc516d9d179917e544d3cab9f6c216ff9e58db795656645e4bc28d8c9047018622736d1d89ceb27b9ae99b63b09697e59f9a7f663e37b30e7617c10680f3288e1c74c55394aae6d38b16e83a0ccc92103d0993e52ccfd34c33f257b4e7f8949c8ee1ad05bd3cc0bf702d47e8beba7e63c12c835b86ac8700481eabf8ad9b4448f087df664547"}, {0x1010, 0x111, 0xfff, "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"}], 0x1160}, 0x1) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000440)) 21:06:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800122bd2000100766574680000000018000200148c253061c28aa7a726ab000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:57 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@multicast2, @loopback}, 0xc) 21:06:57 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1006.832474][ T26] audit: type=1804 audit(1588194417.246:182): pid=7481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1216/file0" dev="sda1" ino=16366 res=1 21:06:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x262000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) lseek(0xffffffffffffffff, 0x2, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x6}, &(0x7f00000001c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x22c, r4, 0xc, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x200, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc5, 0x0, "dc6afb8dfec9dda728f1ab20f676d3ec38b5280d54d53ccab4070a05835bc902d81e287adfde52ee77703b0e6643e29868936331aab89aa9bed534380d4e0e0188499ea1afaee41922b9f6c79feb82e1036ecfb79909b7c6e50b3696448e13038877369337b756f3d94bd5d56a3dbd35718cf41cba314d253131226ec9cd774bd3b644c5cc5d04cc96a601b465acb684d4069af6ca22a690255e8bfed18aa1e3fb290487e414287971ad1e5a9dd91b50fef794b99d9a4598166368b3c2d9ac71dd"}, @NL80211_BAND_60GHZ={0xbc, 0x2, "73b1436255dba7eee4d4fa63de30eae3d85c2a88feb58a901166dcd4b7f2ec9659af5b48ac6c1b2a865c0e43f87bbb39c7cc48a630edb6e0b6866c2a57b3bddcc3d5a9e196ff313bf91a715719471afc57e9acaf9898b8a316266d42c13043c536ca8fe2d6c651a22c25c91b015383e3c1d47bf768567ba2884041725a909d15cf2ae5cff4ff541692143baa8cfdfb2300131f8d6f091f00c1b59b2a2e222d5c4b1e6019ec4d6a46722acfbcba12423549a63bd8b794b941"}, @NL80211_BAND_60GHZ={0x2c, 0x2, "35fba0941aa93b14063816a7bca322011b06fd7821d9eb8cf4d313df8c7c3ee94d70a98ec3a6dd82"}, @NL80211_BAND_60GHZ={0x24, 0x2, "61624a6a90717a4b859bab80dab2f2b304fbf68037672d7c9e5b8f65532130b0"}, @NL80211_BAND_2GHZ={0x27, 0x0, "41104ac15f42ce1cb45001ecc14947bb478c4087bc61d466fd0dffb1b9deb3d77f4678"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x6, 0x0, [0x1b, 0x1d]}, {0x6, 0x0, [0x3, 0x15]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20008090}, 0x4080) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r5 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r5, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:57 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:57 executing program 0: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280016000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYRES64], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000100000000000000007eb5ef3bbd71a1db73b6aa7796f51884000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000c3082f5b8386d827046dcec20a62da080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) [ 1006.962995][ T26] audit: type=1804 audit(1588194417.316:183): pid=7481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1216/file0" dev="sda1" ino=16366 res=1 21:06:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000480), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$GIO_FONT(r1, 0x4b61, &(0x7f00000001c0)=""/155) [ 1007.124267][ T26] audit: type=1804 audit(1588194417.346:184): pid=7491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1216/file0" dev="sda1" ino=16366 res=1 21:06:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000440)=@netrom={'nr', 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xf8230a4fda46207}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x6004000) 21:06:57 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1007.249829][ T26] audit: type=1804 audit(1588194417.406:185): pid=7500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1216/file0" dev="sda1" ino=16366 res=1 21:06:57 executing program 0: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:57 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/230, 0x20000426) lseek(r3, 0x2, 0x1) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/230, 0x20000426) lseek(r4, 0x2, 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16], @ANYRESDEC, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="4fc877726e7cac1cc253ea7a7db96c9e6e42c5039b31d256a2cbd517e05e1f491dde1165923be4ddf5812d197fd3a5dea96bc7810ac9a759af42ae3be13f15d27ed48ebd5f188b0100000001000000a99f57e0f1012aea37d1156d5eaea107709fe9b4ccf67c9d18ef21675fc8385620ff05ef80df4cdda83e65723a150975f77ae61081177cb2ccc7c9f311331a5617b1e19d229c90c3caf8c2dec83be55f3dbd00000088090e4aab9deb3e9fe11f79", @ANYRES64=r4, @ANYRESOCT=0x0]], &(0x7f0000000280)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000100)=ANY=[@ANYBLOB="638a626f6d6d69698b052c49e11e33193a60a7c6f7807830303030073038562c00385bee3ceea4639d84efb3488e10a2860d39b6d627d0163384f13d28641ce36610095ff6df37ee4366d409803af9756e10e9af0988ef3666fab9c9efd3c4d4d7df475d6284"]) 21:06:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1007.395970][ T7522] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1007.445298][ T7522] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1007.446720][ T26] audit: type=1804 audit(1588194417.866:186): pid=7524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1217/file0" dev="sda1" ino=16094 res=1 21:06:57 executing program 0: r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1007.501251][ T7527] __nla_validate_parse: 2 callbacks suppressed [ 1007.501262][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:58 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1007.625419][ T26] audit: type=1804 audit(1588194417.906:187): pid=7524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1217/file0" dev="sda1" ino=16094 res=1 [ 1007.724462][ T26] audit: type=1804 audit(1588194417.996:188): pid=7541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1217/file0" dev="sda1" ino=16094 res=1 [ 1007.759594][ T7522] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1007.766295][ T26] audit: type=1804 audit(1588194418.006:189): pid=7524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1217/file0" dev="sda1" ino=16094 res=1 [ 1007.791514][ T7522] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1007.853756][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.944140][ T7493] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 21:06:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/110) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:06:58 executing program 0: r0 = socket(0x200000000000011, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:58 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000100)=ANY=[@ANYBLOB="636f6d6d69743d306f525b6a613030303037633037343338662c002b043b87c2b58a2f150ac9a715815f84"]) 21:06:58 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:06:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "43878a3dd15c75443664c8b7f74b84"}]}, 0x34}, 0x1, 0x0, 0x0, 0x44091}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYBLOB="252edf56f984bf5600000000000000000080000028e6110000000018000200148c253061c28aa7a726ab36fb400100"/60, @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x20000040) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:06:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:06:58 executing program 0: r0 = socket(0x200000000000011, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1008.224871][ T7571] EXT4-fs (sda1): Unrecognized mount option "commit=0oR[ja00007c07438f" or missing value 21:06:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000d3f4b4fe1a56d80a3fda44744242cdafd270b47a647bc05bb4a5b3a41e969db076afdce0001493c09cf23708fe11d5e27e6a28506b06ccd5f86a1804f4e9dada200de7d5ef4d1b62d5ee6f4903419c73c177a46e90f46374ced4", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00400000000000000a0000000900010072090000000000000c00020008000200ffffffff"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8084) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) read$rfkill(r6, &(0x7f0000000140), 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x3, 'netpci0\x00', {0x5}, 0x4581}) [ 1008.416519][ T7590] EXT4-fs (sda1): Unrecognized mount option "commit=0oR[ja00007c07438f" or missing value 21:06:58 executing program 0: r0 = socket(0x200000000000011, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:58 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x2aa482e, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6d6d69743d30785a8ebc74b28dcc5f3b6d569c50902acf02d8169656b7afcbb63609d08552c913658589009208ec921c59f7315dfaa74544bd6e00bbf882678bb50000000000000000000000a5ca9a070000000000"]) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/230, 0x20000426) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000280)=0x4) lseek(r0, 0x2, 0x1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000100), &(0x7f0000000140)=""/115, 0x73}) [ 1008.479161][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:59 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:06:59 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1008.706564][ T7604] EXT4-fs (sda1): Unrecognized mount option "commit=0xZt_;mVP*V˶6 ЅRe" or missing value [ 1008.729739][ T7595] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1008.801529][ T26] audit: type=1804 audit(1588194419.216:190): pid=7617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1219/file0" dev="sda1" ino=16106 res=1 [ 1008.906225][ T7617] EXT4-fs (sda1): Unrecognized mount option "commit=0xZt_;mVP*V˶6 ЅRe" or missing value [ 1008.995975][ T26] audit: type=1804 audit(1588194419.416:191): pid=7604 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir329716555/syzkaller.2poRL9/1219/file0" dev="sda1" ino=16106 res=1 [ 1009.238656][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1009.260707][ T7593] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x10000, 0x0, [], {0x0, @reserved}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:07:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:07:00 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:07:00 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="929ed0c3ec53afe9231c452ddaaf6669526530bbbf"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa483e, &(0x7f0000000180)={[{@commit={'commit', 0x3d, 0x7b07838f}}, {@data_err_ignore='data_err=ignore'}, {@data_err_abort='data_err=abort'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 21:07:00 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f00000003c0)={'caif0\x00', 0x2, 0x9}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef67000000000000000000000000000000000000000000000000000000000000000000000000000000000000000067a361382260e0c8aa8b313eb7000000200000"], 0x3}, 0x1, 0x0, 0x0, 0x34040000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) [ 1010.037778][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:00 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:00 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:00 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:07:00 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="00000000040000"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x7b07838f}}]}) [ 1010.390223][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:07:01 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:07:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x109200, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000004c0)={@x25={0x9, @null=' \x00'}, {&(0x7f0000000440)=""/7, 0x7}, &(0x7f0000000480), 0x22}, 0xa0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000340)=""/230, 0x20000426) lseek(r6, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000140)={0x2, 'hsr0\x00', {0x6}, 0x7}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='macvlan1\x00') 21:07:01 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:07:01 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:01 executing program 4: r0 = epoll_create(0x40006) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xff) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 1011.444703][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:02 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:02 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) [ 1011.801032][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f089061fffffff00004000632977fbac14140ee934a0", 0x0, 0x100, 0x60000000}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="b9", 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b61, &(0x7f00000001c0)=""/155) 21:07:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10010, r5, 0xd000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f00000000c0)={0x0, 0x28, [0x6, 0x4, 0xfffffff9, 0xff, 0x2, 0x100, 0xfffffff7, 0x8, 0x1ff, 0xcf]}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) socketpair(0x18, 0x80000, 0x8000, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_dccp_buf(r6, 0x21, 0xc, &(0x7f0000000440)=""/161, &(0x7f0000000300)=0xa1) 21:07:02 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:02 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:02 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x2}}]}) 21:07:03 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, 0x0) 21:07:03 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040)='4', &(0x7f0000000100)}, 0x20) 21:07:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) dup(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x111500, 0xc) ioctl$RTC_UIE_ON(r3, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21:07:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x5}}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = dup3(r6, r7, 0x0) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r10, 0x81}, &(0x7f0000000300)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00000000000000000a0000000900010072737670000000000c00020008000200ffffffff"], 0x3c}}, 0x0) 21:07:03 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bind$packet(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1013.015945][ T7760] EXT4-fs (sda1): re-mounted. Opts: 21:07:03 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, 0x0) 21:07:03 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040)='4', &(0x7f0000000100)}, 0x20) 21:07:03 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bind$packet(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf20000074fa7343ee4923731715e2e4ff956d4abd966097a93a6221d4dd5cc01c1494acbb79aac8166db7ddbb807d755dedec48df9bfe5147bc9dc2b658b440f685c16c6a8b0da8957c3262e39590729dad5468d14bb1a2cf412d6a6719044da77eff5069e0115f5d6f0df9b2c"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/230, 0x20000426) lseek(r5, 0x2, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0xffff0001, 0x80, 0x7fff, 0x1}}) [ 1013.394194][ T7784] EXT4-fs (sda1): re-mounted. Opts: [ 1013.419809][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:03 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bind$packet(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 21:07:04 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, 0x0) 21:07:04 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1013.704008][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1013.724480][ T7800] EXT4-fs (sda1): re-mounted. Opts: 21:07:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 21:07:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}}) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = dup2(r1, r0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = dup2(r2, r3) socket(0x11, 0x800000003, 0x0) socket(0x0, 0x3, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) 21:07:04 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)) 21:07:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 21:07:04 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1014.241464][ T7821] EXT4-fs (sda1): re-mounted. Opts: [ 1014.250973][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1014.266952][ T26] audit: type=1800 audit(1588194424.686:192): pid=7826 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16152 res=0 21:07:04 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)) [ 1014.352163][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xc38b, 0xc40) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r4, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000000)) 21:07:04 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bind$packet(r0, &(0x7f0000000240), 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1014.572000][ T7843] EXT4-fs (sda1): re-mounted. Opts: 21:07:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/230, 0x20000426) lseek(r2, 0x2, 0x1) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getrlimit(0xb, &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x8, 0x1, 0x9, 0x3f, 0x0, 0x9, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x1708, 0x0, 0x80, 0x1, 0x1, 0x4, 0x3}, 0x0, 0xd, r2, 0x1) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085c1e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) 21:07:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = dup2(r1, r0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) r4 = dup2(r2, r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) 21:07:05 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1014.750224][ T26] audit: type=1800 audit(1588194425.166:193): pid=7853 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16160 res=0 [ 1014.787294][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:05 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)) 21:07:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = dup2(r1, r0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) r4 = dup2(r2, r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) [ 1015.005348][ T7864] EXT4-fs (sda1): re-mounted. Opts: [ 1015.018364][ T26] audit: type=1800 audit(1588194425.436:194): pid=7865 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16160 res=0 [ 1015.050594][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:05 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 21:07:05 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, &(0x7f0000000080)={[{@commit={'commit'}}]}) 21:07:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d6513819000000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', r8}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000200100005071000000000000000000000004e0899f36af40495f4674610d5029632def66290460d72ee80ed6126d4ebbeac9862e828e9a93c1dd374b9c07918cf085b2825710756466066e64cc71d71e90c", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200148c253061c28aa7a726ab36fb40010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7400000000000500"/20, @ANYRES32=r9, @ANYRESHEX=r0], 0x3}}, 0x4c050) lseek(0xffffffffffffffff, 0x2, 0x1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xffff}}]}}]}, 0x3c}}, 0x0) [ 1015.349878][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1015.389331][ T7877] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 21:07:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}}) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = dup2(r1, r0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) r4 = dup2(r2, r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) fadvise64(0xffffffffffffffff, 0x6, 0x2, 0x5) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) 21:07:05 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 1015.474523][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1015.592930][ T26] audit: type=1800 audit(1588194426.006:195): pid=7891 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16142 res=0 [ 1016.408868][ T7904] ================================================================== [ 1016.417003][ T7904] BUG: KCSAN: data-race in __delete_from_page_cache / shmem_recalc_inode [ 1016.425397][ T7904] [ 1016.427730][ T7904] write to 0xffff888123b818a8 of 8 bytes by task 7901 on cpu 1: [ 1016.435361][ T7904] __delete_from_page_cache+0x1e4/0x490 [ 1016.440908][ T7904] __remove_mapping+0x2ea/0x540 [ 1016.445760][ T7904] shrink_page_list+0x1148/0x2a40 [ 1016.450796][ T7904] reclaim_pages+0x542/0x710 [ 1016.455388][ T7904] madvise_cold_or_pageout_pte_range+0xc03/0x18f0 [ 1016.461803][ T7904] __walk_page_range+0xa6e/0x1550 [ 1016.466825][ T7904] walk_page_range+0x14c/0x280 [ 1016.471586][ T7904] madvise_pageout+0x15e/0x200 [ 1016.476346][ T7904] do_madvise+0x865/0x1230 [ 1016.480760][ T7904] __x64_sys_madvise+0x48/0x60 [ 1016.485533][ T7904] do_syscall_64+0xc7/0x3b0 [ 1016.490047][ T7904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1016.495925][ T7904] [ 1016.498256][ T7904] read to 0xffff888123b818a8 of 8 bytes by task 7904 on cpu 0: [ 1016.505821][ T7904] shmem_recalc_inode+0x50/0x180 [ 1016.510757][ T7904] shmem_getpage_gfp+0x5ca/0x1520 [ 1016.515791][ T7904] shmem_fault+0x117/0x4b0 [ 1016.520204][ T7904] __do_fault+0xa8/0x1e0 [ 1016.524448][ T7904] __handle_mm_fault+0x2679/0x2ec0 [ 1016.529556][ T7904] handle_mm_fault+0x21c/0x540 [ 1016.534316][ T7904] __get_user_pages+0x533/0x11c0 [ 1016.539273][ T7904] populate_vma_page_range+0xdc/0x100 [ 1016.544642][ T7904] __mm_populate+0x168/0x2b0 [ 1016.549225][ T7904] vm_mmap_pgoff+0x185/0x190 [ 1016.553812][ T7904] ksys_mmap_pgoff+0x96/0x420 [ 1016.558502][ T7904] do_syscall_64+0xc7/0x3b0 [ 1016.563004][ T7904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1016.568893][ T7904] [ 1016.571209][ T7904] Reported by Kernel Concurrency Sanitizer on: [ 1016.577356][ T7904] CPU: 0 PID: 7904 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 1016.585926][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.595968][ T7904] ================================================================== [ 1016.604020][ T7904] Kernel panic - not syncing: panic_on_warn set ... [ 1016.610604][ T7904] CPU: 0 PID: 7904 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 1016.619190][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.629234][ T7904] Call Trace: [ 1016.632525][ T7904] dump_stack+0x11d/0x187 [ 1016.636855][ T7904] panic+0x210/0x640 [ 1016.640772][ T7904] ? vprintk_func+0x89/0x13a [ 1016.645373][ T7904] kcsan_report.cold+0xc/0x1a [ 1016.650062][ T7904] kcsan_setup_watchpoint+0x3fb/0x440 [ 1016.655434][ T7904] shmem_recalc_inode+0x50/0x180 [ 1016.660370][ T7904] shmem_getpage_gfp+0x5ca/0x1520 [ 1016.665417][ T7904] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1016.671305][ T7904] shmem_fault+0x117/0x4b0 [ 1016.675729][ T7904] __do_fault+0xa8/0x1e0 [ 1016.679971][ T7904] __handle_mm_fault+0x2679/0x2ec0 [ 1016.685097][ T7904] handle_mm_fault+0x21c/0x540 [ 1016.689863][ T7904] __get_user_pages+0x533/0x11c0 [ 1016.694832][ T7904] populate_vma_page_range+0xdc/0x100 [ 1016.700206][ T7904] __mm_populate+0x168/0x2b0 [ 1016.704802][ T7904] vm_mmap_pgoff+0x185/0x190 [ 1016.709400][ T7904] ksys_mmap_pgoff+0x96/0x420 [ 1016.714082][ T7904] ? debug_smp_processor_id+0x3f/0x129 [ 1016.719544][ T7904] do_syscall_64+0xc7/0x3b0 [ 1016.724051][ T7904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1016.729933][ T7904] RIP: 0033:0x45c829 [ 1016.733828][ T7904] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.753437][ T7904] RSP: 002b:00007f9d64b57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1016.761845][ T7904] RAX: ffffffffffffffda RBX: 00000000004f58c0 RCX: 000000000045c829 [ 1016.769809][ T7904] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 1016.777773][ T7904] RBP: 000000000078c040 R08: ffffffffffffffff R09: 0000000000000000 [ 1016.785742][ T7904] R10: 0000000000008031 R11: 0000000000000246 R12: 00000000ffffffff [ 1016.793725][ T7904] R13: 0000000000000738 R14: 00000000004c9f80 R15: 00007f9d64b586d4 [ 1016.802789][ T7904] Kernel Offset: disabled [ 1016.807105][ T7904] Rebooting in 86400 seconds..