net6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x1100, @dev, 0x3}, 0x1c) 14:31:59 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x700}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:31:59 executing program 1: r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x44004) ptrace$pokeuser(0x6, r0, 0x3, 0x7fffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x41, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair(0x18, 0x3, 0x5, &(0x7f0000000000)) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x1299f000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f0836660f3a633ea466bad004ec9a13000000fb00f00fb18500000000670f01cb660f388054fe04660f3a0aef07cf66ba410066ed", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 349.114050][T22211] FAULT_INJECTION: forcing a failure. [ 349.114050][T22211] name failslab, interval 1, probability 0, space 0, times 0 14:31:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x11000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 349.159823][T22211] CPU: 1 PID: 22211 Comm: syz-executor.3 Not tainted 5.12.0-rc7-syzkaller #0 [ 349.168621][T22211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.178710][T22211] Call Trace: [ 349.182082][T22211] dump_stack+0x137/0x19d [ 349.186623][T22211] should_fail+0x23c/0x250 [ 349.191225][T22211] __should_failslab+0x81/0x90 [ 349.196095][T22211] should_failslab+0x5/0x20 [ 349.200609][T22211] kmem_cache_alloc_node_trace+0x5b/0x310 [ 349.206350][T22211] ? io_wq_create+0x247/0x5c0 [ 349.211037][T22211] io_wq_create+0x247/0x5c0 [ 349.215546][T22211] io_uring_alloc_task_context+0x159/0x290 [ 349.221352][T22211] ? io_free_work+0x30/0x30 [ 349.225849][T22211] ? tctx_task_work+0x3a0/0x3a0 [ 349.230699][T22211] io_uring_add_task_file+0x1c6/0x200 [ 349.236074][T22211] __se_sys_io_uring_enter+0x1ef/0xb10 [ 349.241553][T22211] ? fput+0x2d/0x130 [ 349.245465][T22211] __x64_sys_io_uring_enter+0x74/0x80 [ 349.250843][T22211] do_syscall_64+0x39/0x80 [ 349.255872][T22211] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 349.261818][T22211] RIP: 0033:0x466459 [ 349.265823][T22211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 349.285509][T22211] RSP: 002b:00007fd971508188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 349.293979][T22211] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 349.301953][T22211] RDX: 0000000000000000 RSI: 0000000000003edb RDI: 0000000000000003 [ 349.310010][T22211] RBP: 00007fd9715081d0 R08: 0000000000000000 R09: 0000000000000000 [ 349.317981][T22211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.326066][T22211] R13: 00007ffcf2164a6f R14: 00007fd971508300 R15: 0000000000022000 [ 349.341348][ T36] kauditd_printk_skb: 12 callbacks suppressed 14:31:59 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x2000, @dev, 0x3}, 0x1c) 14:31:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x20000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 349.341357][ T36] audit: type=1800 audit(1618324319.261:695): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14499 res=0 errno=0 14:31:59 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x900}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 349.403391][ T36] audit: type=1800 audit(1618324319.291:696): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14499 res=0 errno=0 [ 349.455672][T22243] __nla_validate_parse: 4 callbacks suppressed [ 349.455684][T22243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 349.485868][ T36] audit: type=1800 audit(1618324319.391:697): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14433 res=0 errno=0 [ 349.526386][ T36] audit: type=1800 audit(1618324319.441:698): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14433 res=0 errno=0 14:32:02 executing program 3 (fault-call:4 fault-nth:5): r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 14:32:02 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{}, {0x8}, 0x10f, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="3a29d446019ba45ae0dcce2741e43036e9b4c982e472ec4d96363f999065f5c16e190f7aae827c88bc8998935807749daf4ebeced790a4a40ff65336c840ae3a09224f292954f53a4a6a062b87015665af9a0aecaf003d0b6196be340b4a94172d83053b10f68ce370d7998f9b451eac00208cb0d03b476bb1ec9a4f28bdd79ace40d3ed94c0faa20dbf08b55f8f7fddfb4b14286e18d2c4fa638b7eca2f48eedfffec81a85fa11d5c", 0xa9, 0x0, &(0x7f0000000280)={0x2, 0xed, {0x1, 0xc, 0x5d, "8cadd2447ed4dad85eb7d00728cc8a9b50819332798ac59e17efe75f3b23ffc9ad19551f7025442b515298b5def7db4118d3032ab4b263b727f9399cf7eed237b8dbb905f0dfb6e92b50d0586ca2482d6d462a1aa3c93393c883b9835f", 0x83, "5559611082855ec66ed7f397003e3c6c2a46126663597672d7e454f8e4f7b488c880333cc7cbcf73e1c290294048fbbc3ee042dda1ed2a6f28e3f52c3d3d3b64f9ee2a38bf33a78a182ed49718f6221c2f4f7f2f666b4baf9ce7b65f317246ab535707082b9495b6a2469953ddf93a2e633f38008f92470ece3637cef09ee26ef858c2"}, 0x2c, "779428650fb812a3e0770cfae229cc233f77499e341176905ddd74d8a8bbebdbc0fedd9460b6c523884deed6"}, 0x125}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x80000, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/10, 0xa}], 0x1, 0x2, 0x38000000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000040)="400020000100010006000000001c08107f136d", 0x13, 0x400}, {&(0x7f0000001640)="ff00000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffff03000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff504effffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff06ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed415cf970000000e7c2645f5303", 0x80e, 0x800}, {0x0, 0x0, 0x4c00}], 0x1008c5b, &(0x7f0000000040)=ANY=[]) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002800310f00"/20, @ANYRES32=r6, @ANYBLOB="000000000000ff"], 0x54}}, 0x0) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000440)=0x2) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000480)={'veth1_virt_wifi\x00', {0x2, 0x0, @local}}) 14:32:02 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x2c01, @dev, 0x3}, 0x1c) 14:32:02 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:02 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f0000000100)=0x0) r1 = getpgid(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000200)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000240)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2808, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x202}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x3d, 0x2, @tid=r1}, &(0x7f00000000c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}}, &(0x7f0000000380)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000002000)) fcntl$lock(r6, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x60000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 352.122544][T22269] loop1: detected capacity change from 0 to 76 [ 352.132406][T22271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 352.150098][T22269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.160049][ T36] audit: type=1800 audit(1618324322.071:699): pid=22275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14882 res=0 errno=0 [ 352.211405][T22290] FAULT_INJECTION: forcing a failure. 14:32:02 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x3f00, @dev, 0x3}, 0x1c) [ 352.211405][T22290] name failslab, interval 1, probability 0, space 0, times 0 [ 352.260742][T22297] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.293817][T22290] CPU: 1 PID: 22290 Comm: syz-executor.3 Not tainted 5.12.0-rc7-syzkaller #0 [ 352.302642][T22290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.312801][T22290] Call Trace: [ 352.316434][T22290] dump_stack+0x137/0x19d [ 352.320852][T22290] should_fail+0x23c/0x250 [ 352.325498][T22290] __should_failslab+0x81/0x90 [ 352.330267][T22290] should_failslab+0x5/0x20 [ 352.334827][T22290] kmem_cache_alloc_node+0x56/0x310 [ 352.340021][T22290] ? rmqueue+0xfd4/0x1160 [ 352.344442][T22290] ? dup_task_struct+0x6c/0x750 [ 352.349289][T22290] ? aa_get_newest_label+0x74/0x250 [ 352.354650][T22290] dup_task_struct+0x6c/0x750 [ 352.359358][T22290] copy_process+0x40b/0x2e60 [ 352.364084][T22290] ? pcpu_alloc_area+0x574/0x590 [ 352.369020][T22290] ? io_wq_worker_cancel+0x150/0x150 [ 352.374367][T22290] create_io_thread+0x81/0xa0 [ 352.379151][T22290] ? io_wq_worker_cancel+0x150/0x150 [ 352.384437][T22290] io_wq_fork_manager+0xac/0x170 [ 352.389415][T22290] io_wq_create+0x447/0x5c0 [ 352.395138][T22290] io_uring_alloc_task_context+0x159/0x290 [ 352.401134][T22290] ? io_free_work+0x30/0x30 [ 352.405637][T22290] ? tctx_task_work+0x3a0/0x3a0 14:32:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x65580000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 352.410482][T22290] io_uring_add_task_file+0x1c6/0x200 [ 352.415900][T22290] __se_sys_io_uring_enter+0x1ef/0xb10 [ 352.421483][T22290] ? fput+0x2d/0x130 [ 352.426421][T22290] __x64_sys_io_uring_enter+0x74/0x80 [ 352.431804][T22290] do_syscall_64+0x39/0x80 [ 352.436224][T22290] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.442127][T22290] RIP: 0033:0x466459 [ 352.446144][T22290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.455302][T22312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 352.467049][T22290] RSP: 002b:00007fd971508188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 352.467070][T22290] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 352.467081][T22290] RDX: 0000000000000000 RSI: 0000000000003edb RDI: 0000000000000003 [ 352.467093][T22290] RBP: 00007fd9715081d0 R08: 0000000000000000 R09: 0000000000000000 14:32:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x81000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:02 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x4000, @dev, 0x3}, 0x1c) 14:32:02 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x41, 0x4, @thr={&(0x7f0000000200)="3dcc977467b8e96218632549c775cd7cd1963f36727a24a8961bfeda697ee7ccd8d93c6ac54621d0eb4b9bccf5a2a342fd21a1ad481e3dbea39dc21adb897d7b26edf34449aa4db0445f7e9999fdacf106a53ce8c87addc4500dfaeec15ceef64abbca24ad41ff604e35593b724af48e12fd98f4e0e322f3668bbfd890551255deb7efa64a56df801b93140b96d3141b0035938f95d65fd57fd4c756097e74b285e7414615efd84c", &(0x7f0000000340)="12cb89a2e682334b44d2f2c2892ac4c057fed7851f25cbe14c144e5a9478cd2905059dd7bf8545f2904a7dc66debe22c3af3e1ca32df96cd446d5346f1fb491b52b881f72f0ead8c2998f260891bf9111f705915f9acccad674709171074ada8d6cccef712e36286a65eb35d6cca69f3eaec06297e5fb05fbd0034c9465dd0892b0661ba6abd6bd0ca79e94a045ee485"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000480)={{}, {r2, r3+10000000}}, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 352.467103][T22290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.516636][T22290] R13: 00007ffcf2164a6f R14: 00007fd971508300 R15: 0000000000022000 [ 352.539407][ T36] audit: type=1800 audit(1618324322.451:700): pid=22275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14882 res=0 errno=0 14:32:02 executing program 3 (fault-call:4 fault-nth:6): r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 352.540705][T22289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.596729][T22322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:02 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x4400, @dev, 0x3}, 0x1c) [ 352.655687][T22297] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:02 executing program 1: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000003540)="b0ca02c3c75392733c1bf692fefd7a0f23188eedd85440937ec2736664af694e14ad40e72724758e4c242d427a29c09b52e173eb952e5b4aa2e6762f9fa7b431159627072578691c4cd1712b177809e912686bc4d654b85912ad9dbf47ff5cd864a7efbf70f5300f8e26cda6e4e627c0cb304cc6e3eea57875b735344ea2034f8d7dd9f1c085cb2680192bb7fab4643d911062d89f7d6bdc0c32a54e59247acba18d2b69a0ca4128d2740eb227115e03d056789e603c2de32b8c37a0a939cc79b6b1f92763ba342319cdf37c696c9cbbb323e341546edcb409493a17afcda5309ebca2db088db959e964486f4b9651f9f000a3f027dc9a5fa18db200975723a5937c74857d6b370e2b732cd9cb2105fcfe5bc708df39d80bad1f9ac0689b1acec55a86a03b61f179bbd623925431f84ac00591fda7cba9eb92f84fb0dd79b3e62bff826bd709ff2d658b4717cf1611ae43199ffabdf0b15a0459ea4c7d40b4a8f983b19fa4bb32f7a730de0cc354c995cee12a2d6fde4f987bb6758979364af7de04d4797be566751fb564c0395eb9e77a044ddd23e8ddcde4b778e27ff58fb5f296cffc36cca3fff8949228132476621e66f0170a7ed375ed9d8b162a739748b7943e1741d0e4e7966a0df2fcfe09bb3216f4669ee754f05f16268700bbc0a9484992bc9d87697310ea98eccdcf1f5a6b1fc8b622fa8ee5fa8f2e55b95251f9a6f251bb1aa8e23da0b5d2c1a22cabd0b291893623f1904df20fe1b81196204fea0bc9dc68ca8a9a9ab5c98d3819d1ac86b505ad5b79344e707b5460a1a72a6f829ae41de5f48fa2f9ee5116bb5e8417b44896cc6bcf7916fc2425ad6ed4d7c27845dd674d4f64ee76faebe94af850d8c188708af4e54eb1ba1a9643bb2da2dd420ec85151e56d9cbda9f8f0b339d19dd952f06aa8d630095b96e50468ee8fcf7ea20b72558c042a9e56e3905a88dfa21d5e5aa551ee26b5ad9554da2770fcda090e25610c3b8d629cbb436ffd52346378035b2206e648599fcc9f5b94004e96390b07b4eb690ed5098bce203b65f952b9ab22323a086475a5b538f111479bc0e8978869816422615a094256671755214f1e90b1f7478b0dcad7567bfa6fa66181acb9edf05815aa1be58c4b25ae51d372ce4d1d4b457f94e3d4cd785bde49706829910d3a15d21eb3b9eaa0f7f2a11b70268b0cfa7f533030abefe96edf04189328ce1438a3dda48928fef0cf74d1d61d3f4dbca0265a110d10bb538464c616324828acebe65e0988ddadeb74b47763e2d40c701cfbd0ff940c59d669661ffc9c5cbdc773a7039594a3aeb41b799cd3e91d9dc96307e7098389a260d10f31d825cffefe6083e6cde58ba2182ef005cabc333b943f5cd308181145bca5474a12674d7cd6086d5c670e048dd9b94ee7c99a86e92a9dc836f28c826d4d15cb1aebe889a858fedd085d0938dd4c1687aab926d8af93e754d910fee61f6ccafe600cb68e36d181db2f2278d7ca537a032bd977751257d4444874c0416d8d07e657991d048beaa4b4b98f7e7cc19a477b38b48f31dfb408c9facdade20fa3f248ec470dc1e1a6b5dcbdf3e6026c921519afb7aa1d5ff106c8f1d0b46be10f86efc3bbe1e61cb6862bc0f5c7d69ef36d56104dcb37f584252034cf84dc3e4e929f24f9fec7f2f164ac9ec9eee6231535ee7ed34532292997ecbe00bab9501c89f23b1518c685eb19c7f55d046f72ed5921e7f2619659f2e3ae35a0e87ccf5e45d1ce48d985858d79acf890b21102f8f577e4236557b725ad3876b7fef308f5c7491d656ca6f93eb7a1f2d5487013c8d6f46d384a432ef9472493b5f35e1205bc1262b3c74b39bbce75b775cc42551dbefe62d81011b13db8c934cfee18335f53c99a64e57f2afec1e31a52008e61a9f2003811454036c5f309295f44b76ed2e2e23c204c179a60182b2a55d6ef3876bb47693c669e72d8ee41ea88cb3d7e6701bc7b3064640a4f4a1b730cb641b706bdd7c3358a2f0467fb05bfa4ca944efad2b6c679765d452f99f83ee7886f7c354134ba942089d4ec71b7ddce74ddd091f4390712fc144761cc75914828b8a91f905ac859546682261174d8026dbfc2f6512037193a894244d842b8bd7e95684313bc34b11ce5f5a2884aac8d9d0be76b5f1474807f221f2bccb0ce0b5aaca8236e641c068309705c469eab765eebd0e4d707cd930748418f7d2df27941957640f6c1dc1ee703e07818a17ed08712fefb640811ca268de7baaa143143d37bf2edad3b9234ebceaac7c6f8d5a7d56ddc77740cec219aed9835a3fb6733972203845a8c9c62f8fbaa81b5f13c293bf65c02751b541fca9d6ff4b41d6363609690f86b2c95f3a677bcdf949290344d23cebeed1571e03a1519a91cb4953d208c2f96750a6b55aa56114df894c6ecc998136f7e2d7bc755012f8ac92fabc4d1e16fe6aaa3f1b12f5b064d2abd4646b40ac7300e5316aa40711c0951d269a0d90bb3304c616d0351300e68650d113d9abde4fbe237b633790fd75a4e26139a74c0201d5adee8bab3a84cb6188ab188c5abc83216aa7935cd09f589233cfcafe5d1d82a06befa2e2a603a253eb2cedbf610f3bb12c409b5a46d905a25113230e1890af373492c7621deb294f321cc2f37dc71b936cba1fedbe40d6269b9cd1e17e836b26ce2453664c9e6e05a36b15a92a927bf96bc4064ae32b779f76d67096b91131b00d8f465317cdb28bde9ec527b93f6e4c105917a72d1757dc2aee590c2afccc0be2626b62171da0cb24613d9f58e5f1179b12bb76c44b7297923ea9ddc020fceb7e869e265c8da1ecbb4b777014f4871a226d4561639aa50689dcafc876b118507d289a0d944d8180f10773434280585e613dbe4609660a861a4f59aac17f3252f9dcbd6bc4dfc48112bf588784452155761f0e4cefa09192caad2da416eca598ddf03ce9b4f2f06fdfc3e696fa8c8294a3ed835b86da51367f6704d715e5406784676269b9a0f18a4d19ed03bc9f56a08e7caab9841097f45c12d27dce000e01e53d125084b41530114302b09e8cd0dba39764c7ea658640d4daff3ef08e91e8172db28678faacf1a753def1b698d782411a21af21936853dee2dc0cd6d80a31f543a7c481d993c759856bafe9f2641cdaa47c0a3b9a77e08197aaafbf812b99d161424b317c66c1bb54c2693380585ea0c073480d5bc8e3b2f17170d9147b49d37197bcdd2193fe2f8d118205629fe9b79b2c4b5f3edf5cca44e98c063be7b905268853a72e4593c2790be32c0867152ab6421d8ecd8c578bdf0c66ae72afcb848121f40d44833d772f087e4099ed9ada389433fb75980d9679d177523d8158bb7412a65c7d60b2078340a0a5559373e2f7aef3672f45d3fb86b13905ce64f48f1a17e54e4f7210af74af2d2a412178a97899e2efdd5658ffdc415fde212d3ccb568a0adb8cb9717dc28a604e3c3fce38a287f95f8e9cfe04da51e78265d00c25087c4f8a5ae29a7091e659d3e27b76ec0531661567f02f643b76da33451922312e0ab8a8a9901b4ba730c5423b8a875de7ac2566a90bed982beb8b8a754065dde7139b05bfd7977288192ab037609b92eb28b4c4250dceec88994c7ec16e824c12fd43590ff9f3be07d43261f75382cbb0ad5caf19b5d7c27c46cc1428f3e59bc8dcae9b20aa3793034f115b359cc228d9e2859eb24b0d1a16e78f2f68ea6ab3644638718cf6890509cd2407ba8bf28679ca2c0c56f37af1512e022fd7b88d40906373d32bb05893540e357e2713db138d670785dfe23ccddd18b609dfe9ff68e6524ee5d04d262ce6734bdc50c5c11a4ea210d53cc338d87299a0459ea3c4259b1c31aa4118da17f1de1e86e9066e88cfc20050224f3ebd431fa459d1f450a40e55b61a2a98017266fc05571420ccc995f5f52e2eea74f64ad63143e41391b5106e2510139ab331772d92245207918fff86452e6e13b68a4e94f002ba7955df3abfba9e57fc57444838733ed2ee4926c82d38edd0e08b9b58b793c39d9134e40dfbded915eb713c94d58a5c7c7794a61f00ea0a54146d2914742835d67f6043c086bfb722a07a9a3b98fce1bf4291f5efaf956750d9c0cdee95c35fef6381190ecd615a51eac5f3fd445a1a96fce34392bde2415f833c279fbaacb81df2a86c4571644c091d596bc64b595ff77ab437fd1a4dc48ddde3affe6dc5796da981453cf50e8e35eecacc19234ef5e90286bbd49e7350e0150460d92ae3ecebed9588a0a5005fd242eeb35c6039f58b5a9dd93df14593607397edc3b6ca368450ec234390d171d7a0584780ab147d83a24c443d19bda3bd11af9d936ea008046e2caa0c4f10a001088458709868e28e21656b0090c5128e875092bb126bc858051f673180c5e28dfc3c22dc1df9cf4e24ff1c90335287d4f383ad1810600facd2457bc9aa0699d1fb96f5424f246f9662025b7c855ae4b4e19cf3237807ce50419eb4f32308a5615487c8a22107cab3723f31c66b6c8b1039bd324ac968730e7c98ac10414912fb97163f76b115e244e02b824edb10169716276043556ab23a623e187e359bcacb06e2ed6d12658005502ffb0f68f16571b0d01bea2b4316be6653271f48619f1148b8686f0e991b00c6f112efa83ae0321f00bbcc127a19df8ab3742b8ce715d096a07e510f931afc457b3ad554760e351088dad120f0b31147d7e7507eb3febc9729917ba1e5990e72e6fc6c0c9f42ff4fb5d76814f24ad6ded573c0b6baefaa9009b78ec0798fe924ceb55d26aef4dcf2e277091d61dde2dfea0f7ac55376229824facaba44c2073e5245021ed874ad9885e58a3241eed8fc314d0b2713b2e11c35d52b96b6eaac996856e23c10e995ecefd08035e4956be8664d3da534826681665217d515d4eaa322a7ad0a4bad2758b03ab39ee6fc51b533ec090e8232c701a0530940472a04dc582dc8139cec948bc4c183307254f386793eb870b3535037a4dd604445ea1391a9f5d4f189c1124d7058231bc6b71da923369453f443fd8b7ad6f72562718483b2b09e794164e3b4369edc2688f0b47d9aa82fd3e2abfd0fdca20e1026d9b5a7f3ac75d3dfa413c0f7f2bc6f9ed17693fb97a17c6c6195ddf31247a21a8d9564a81365065a2b63427dcd7e4906fdd0c54812463ea88695353a73222d8ae5703f14272928690087c225b8597ab2492033e85e8422bed98d31e0f67df314c0103e5731edc039924a31aef0f7975f1eefbc00a9e7a81e9ed5c21fcbfe7a0532ca5af4f670802d1975fa2e8e7277d4c2a7301efc51a3942da8be4e0279e7fe8d5e6400a06163f337245404d3db010ea76ba3915b50d0c8fe312c5476f28afb25c722c83f9a24fbc38d0d79ff96c8c75466ac3dca472e147558388ce70938fe1ba7392b7201a47a8b6a24fbce3c61e7acd3c2ac30e62a340c6bd6a193b141a68e50d468aa112139545cdd2bc6dd5136d53018cf12e4e772e0eccc395701557a9f9867b6eb3fdc6cae709699bf34c1bbea0848e8d3905c2c2ab213b0dedd1153f3434c001d76cc4ced971e001b9412d0ac2d48167495dd172597b163a16a4f03c0cc1730546b1365ae293309491b703debaee5b217f898bfe43243f92db161174833be616dc086aceb81b84918d95047f802a46a6fcbc3f64fa1aaf4f938b739ebf10975210b3a2841b63e93d834cbd6d7799fa10bd78516d4435a39307a91fbab40d40a738761ba5eeb210cd4ace710671e3d6ff5d4dea76254e35f91c4bc9db1f78953dac482c", 0x1000}, {&(0x7f00000000c0)="8734085f0255fc0db25347093e7319d0a87f50e738bfc893be074447316d89830a824c42396aa14ca13211ad474899c01ba8c0b133b4a66ea1ea4147eb8953e5d145c72d80c8848bbae5b3f24206a39fb7d90e49733407dcaf9774ce1b10feef8a29cf566020870ddf43ff1596839ed63c01e3bcaec964420f49c5865713af68fa41000f9107a64b7aed1c0d784fb8c1c5550eb25fdd3405709272e42c42336b0117766c86ef81d8bd0b79c790d4220cc2b7b366435c82726db839834d48e01d7635e63fb006a1fe967f943ca03a573973511cb499be715d0d18edc11175115e24", 0xe1}, {&(0x7f0000004540)="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", 0x1000}, {&(0x7f0000000000)="556c0a92f89549e6bfa840d3b4423936447168ef4f75b91ce4511dc72dba5a214cf95273c70b451939a9feee2de6002e6f3b5f406b4ab0c4f229a33a86a81108c8cc73b191030c551455", 0x4a}, {&(0x7f00000001c0)='S', 0x1}, {&(0x7f0000000200)="a7fb263431a073ed8f2fb8babc37e2abc8b3dada9d7277b55d549fd980a4674dc4a6b2ec498a0855bbce003ccbd9da4efd8f2b5a98d438467491f8f4862cd69eb8fd400018b630f34cce451e3591e8398189a9f108499e00502b27e08c3551a912607545336b9326cc530e1b3445e3ebf88f4c85f76cc6a5a8eaf3fef99c7739", 0x80}, {&(0x7f0000000340)="8608a696fcd73043b45be7384222c94c507c3cfbc791712a702bec205b3320f67dbdcae47c35174911d702252d4305c944794a220215094b646cb295f5417c766ac0cb4eee0dcd39823d0e4dd64b5258f88b967af8c21040750abe685de32ac9b7b7159427a7b11c8fdccd3c9f6779d5ff6d9e6c7319093d11077be6ded5cf79d3a3628d0e42bd771b85a0579ffe3e5859ce22d45514ad6ca4aaf002a8077e94b496c181e768df4756cd259ac36667e08b1dbdc4c593", 0xb6}], 0x8, &(0x7f0000005540)=ANY=[@ANYBLOB="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"], 0x11a8}}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast1}, 0x0, 0x1, 0x4, 0x1}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)="0499db2c67fd6061914b0be8c95c58f210b01a70691246eb84ef58", 0x1b}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="846db5b8816eec24e6622b3df982233ee0eb5fb4fc512c8573dce2166b7b152b02917d409583b7e3950e25e7f2e1175a7c8222e2bdc500a93854559dec0436b3d8e550c98e0841b7d1575c944f0ddf5ba9656ceb41a4e0437433ffb990941500da82d559a56d7b42f3b36c4a8be40498f795216503e69a0685727ae5e0bb89f139c2fe11ef6c41cbd59c596066d6d0a60da36a", 0x93}, {&(0x7f00000005c0)="8a2bdca7c42b23cbd01abcf7de02fbd88be1339b4095955951f01f901d2f2229742805501e2552e4838c1110b9b244656701178c7c7b161aa8e756f73a2d984f7d2b90a71266d62b92210c1e56aae05821", 0x51}, {&(0x7f0000000640)="862141e9e927d378021e5b8e325f6f8300dc31c62838d21b198316b4041a2a3b", 0x20}, {&(0x7f0000000680)="2e37ece9eaa1595b5b5f3bd1daa1b0e607ac7787fd072408df1c43bcc766f7934f4522620bed31007939cdfdab3cfe2080649477266774555c34f400041bc0e7c411c4a84dbc7ad159110334ed93eeea9af99086f92592e5d106807954b71f82802bed3f03b620a45619dc425aa1e7fe90cee57c143892f06bebc898e4692b514c01c984b32768a81ecf2a4c71e43835205cf7d64bfdc65fb956a4813e8ca7e451cc3659cb29a2702b01e3fff1d87a614839aef1524698e3f9a783373b32d78acb3e633c2360d09e47a53a433ef299fa553ef1b86189cf9446383b82", 0xdc}, {&(0x7f0000000780)="3a3a99fdd935ff180bf7bfe77ca62b2d1ddac14832f8039e89265167a1a0cc68062841812af1997ceae8424602b46758abbbc35c0eef420efd01730016815d67366775d93ab940f6c0323ebc7e3b66ce48ae54dffd8e73ea91610a84d8e5759857129015aee78f7aba40e0244d88bab658715795315d053ee8bd7ef766602b8c710dd9da7ce5ae22e411567a5c5c6b229a97ab2e7fbd444ca45c39afea674293c816eb4a689ef7f657f014231ced8256308700d9afd57cb671e9d5a181a8063446147b065c42363f6a40fccbd780f7", 0xcf}], 0x7, &(0x7f0000000900)=[{0x10, 0x9, 0x2}, {0x38, 0x104, 0x9, "3a35503de0137ad79c9e596fcbfb4b9422b626201e7114e34609479a0b5456f5b738faf097"}, {0xf0, 0x29, 0x1, "d9502726c7fe4e56b8bfc51f4c8ab45291e3a3dee251ea59d27e307e7353a31954491cda5e7b2c03a829e73393c88881f89064204fe2ca55dc055da7b731d5275700adce78c4c17908d9c2a65e804b6331c76aa52ebe5b0a5f73ad97e48f5d407fd3b7619a47f94fd1081012941e8560d7840ab60200541342c353ff72e0b90e3a6cee44c5dd29365a266662142daa6371cf124d528be4142837ae691a414ba8276b4f4e1082ec0a8e1596f1cf40a4010082d51b1071c0761f8ea0799d67e891ab6f4fc92529c8b04f38523af42c4a5d467ca4a7b56b4698115edd715f94dd42"}, {0x90, 0x105, 0x60b, "cbc2d19692e915e076c2f3536feeee986741ae211e59a826f27bd8e55b379c09c01dbb331fe90b1f6f818591ea974fea8bedf176f2b44226878c2d98c5172ad3b1455b7bde19b12096b7afe2ccf8226e2dc561b7f7a870180fca47fb08327a81797908205b9e37f4ca2b6219d441c9cfa0017554cb44558e70"}, {0xc8, 0x112, 0xb1f8, "620d480fd02e6f46790af7bf19187acae940bdd34fa8919caec6c0b79dad5780a6d062021bd0bebd74a442594a0049cd8d33b0329de3ed06da72d77d062caa380c8e79536abaa208fea81b21e7aea4b92d67ec1dd28bb13b114896684eefbcf4265ed8b21891cc1b50e077b3fc3d73fc98c98f628694b40df85f6e8d17a80415c644ae8c07f2f01be8f5d21f14cdd25455dd429a744a8c2ae9eb0ffade46ed699395e6124421bf9502e9f162ceeb686888209c7637"}], 0x290}}], 0x2, 0x800) r4 = dup(r0) listen(r4, 0x0) accept$unix(r4, 0x0, 0x0) accept$inet6(r0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000300)=[{&(0x7f0000002500)=""/4101, 0x1005}, {0x0}, {0x0}, {0x0}], 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r5, 0x0) r7 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) shutdown(r6, 0x0) 14:32:02 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x81ffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 352.707165][T22340] FAULT_INJECTION: forcing a failure. [ 352.707165][T22340] name failslab, interval 1, probability 0, space 0, times 0 [ 352.747280][T22340] CPU: 0 PID: 22340 Comm: syz-executor.3 Not tainted 5.12.0-rc7-syzkaller #0 [ 352.756140][T22340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.766193][T22340] Call Trace: [ 352.769474][T22340] dump_stack+0x137/0x19d [ 352.773814][T22340] should_fail+0x23c/0x250 [ 352.778284][T22340] ? __delayacct_tsk_init+0x28/0x70 [ 352.783485][T22340] __should_failslab+0x81/0x90 [ 352.788503][T22340] should_failslab+0x5/0x20 [ 352.793053][T22340] kmem_cache_alloc+0x46/0x320 [ 352.797818][T22340] ? dup_task_struct+0x72a/0x750 [ 352.803016][T22340] __delayacct_tsk_init+0x28/0x70 [ 352.808036][T22340] copy_process+0x6ba/0x2e60 [ 352.812700][T22340] ? pcpu_alloc_area+0x574/0x590 [ 352.817218][ T36] audit: type=1800 audit(1618324322.661:701): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14674 res=0 errno=0 [ 352.817638][T22340] ? io_wq_worker_cancel+0x150/0x150 [ 352.854803][T22340] create_io_thread+0x81/0xa0 [ 352.859479][T22340] ? io_wq_worker_cancel+0x150/0x150 [ 352.864768][T22340] io_wq_fork_manager+0xac/0x170 [ 352.869983][T22340] io_wq_create+0x447/0x5c0 [ 352.875797][T22340] io_uring_alloc_task_context+0x159/0x290 [ 352.881611][T22340] ? io_free_work+0x30/0x30 [ 352.886186][T22340] ? tctx_task_work+0x3a0/0x3a0 [ 352.891400][T22340] io_uring_add_task_file+0x1c6/0x200 [ 352.896849][T22340] __se_sys_io_uring_enter+0x1ef/0xb10 [ 352.902416][T22340] ? fput+0x2d/0x130 [ 352.906305][T22340] __x64_sys_io_uring_enter+0x74/0x80 [ 352.911675][T22340] do_syscall_64+0x39/0x80 [ 352.916089][T22340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.921980][T22340] RIP: 0033:0x466459 [ 352.925920][T22340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.945523][T22340] RSP: 002b:00007fd971508188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 14:32:02 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x5800, @dev, 0x3}, 0x1c) [ 352.954303][T22340] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 352.962623][T22340] RDX: 0000000000000000 RSI: 0000000000003edb RDI: 0000000000000003 [ 352.971031][T22340] RBP: 00007fd9715081d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.979050][T22340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.987138][T22340] R13: 00007ffcf2164a6f R14: 00007fd971508300 R15: 0000000000022000 14:32:02 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 353.021575][ T36] audit: type=1800 audit(1618324322.931:702): pid=22348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14674 res=0 errno=0 [ 353.077592][ T36] audit: type=1800 audit(1618324322.991:703): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14737 res=0 errno=0 [ 353.115130][T22363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 353.115767][ T36] audit: type=1800 audit(1618324323.031:704): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14737 res=0 errno=0 14:32:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4788}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:03 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x6000, @dev, 0x3}, 0x1c) 14:32:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x88470000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:03 executing program 3 (fault-call:4 fault-nth:7): r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 353.293915][T22394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 353.339008][T22398] FAULT_INJECTION: forcing a failure. [ 353.339008][T22398] name failslab, interval 1, probability 0, space 0, times 0 [ 353.369116][T22398] CPU: 1 PID: 22398 Comm: syz-executor.3 Not tainted 5.12.0-rc7-syzkaller #0 [ 353.379667][T22398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.390782][T22398] Call Trace: [ 353.394068][T22398] dump_stack+0x137/0x19d [ 353.398417][T22398] should_fail+0x23c/0x250 [ 353.402856][T22398] __should_failslab+0x81/0x90 [ 353.407628][T22398] should_failslab+0x5/0x20 [ 353.412280][T22398] kmem_cache_alloc_node+0x56/0x310 [ 353.417491][T22398] ? alloc_vmap_area+0x134/0x1300 [ 353.422698][T22398] alloc_vmap_area+0x134/0x1300 [ 353.427786][T22398] ? __get_vm_area_node+0x11b/0x240 [ 353.433150][T22398] __get_vm_area_node+0x165/0x240 [ 353.438184][T22398] __vmalloc_node_range+0xba/0x540 [ 353.443323][T22398] ? copy_process+0x40b/0x2e60 [ 353.448127][T22398] ? kmem_cache_alloc_node+0x1bc/0x310 [ 353.453701][T22398] dup_task_struct+0x483/0x750 [ 353.458538][T22398] ? copy_process+0x40b/0x2e60 [ 353.463433][T22398] copy_process+0x40b/0x2e60 [ 353.468063][T22398] ? pcpu_alloc_area+0x574/0x590 [ 353.473009][T22398] ? io_wq_worker_cancel+0x150/0x150 [ 353.478443][T22398] create_io_thread+0x81/0xa0 [ 353.483298][T22398] ? io_wq_worker_cancel+0x150/0x150 [ 353.489736][T22398] io_wq_fork_manager+0xac/0x170 [ 353.494767][T22398] io_wq_create+0x447/0x5c0 [ 353.499341][T22398] io_uring_alloc_task_context+0x159/0x290 [ 353.505305][T22398] ? io_free_work+0x30/0x30 [ 353.510768][T22398] ? tctx_task_work+0x3a0/0x3a0 [ 353.515715][T22398] io_uring_add_task_file+0x1c6/0x200 [ 353.521194][T22398] __se_sys_io_uring_enter+0x1ef/0xb10 [ 353.526742][T22398] ? fput+0x2d/0x130 [ 353.530644][T22398] __x64_sys_io_uring_enter+0x74/0x80 [ 353.536171][T22398] do_syscall_64+0x39/0x80 [ 353.540598][T22398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 353.546682][T22398] RIP: 0033:0x466459 [ 353.550610][T22398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 353.570558][T22398] RSP: 002b:00007fd971508188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 353.579130][T22398] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 353.587407][T22398] RDX: 0000000000000000 RSI: 0000000000003edb RDI: 0000000000000003 [ 353.595920][T22398] RBP: 00007fd9715081d0 R08: 0000000000000000 R09: 0000000000000000 [ 353.604913][T22398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.613952][T22398] R13: 00007ffcf2164a6f R14: 00007fd971508300 R15: 0000000000022000 [ 353.627244][T22398] syz-executor.3: vmalloc: allocation failure: 16384 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 353.643843][T22398] CPU: 0 PID: 22398 Comm: syz-executor.3 Not tainted 5.12.0-rc7-syzkaller #0 [ 353.653260][T22398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.663820][T22398] Call Trace: [ 353.667257][T22398] dump_stack+0x137/0x19d [ 353.671728][T22398] warn_alloc+0x105/0x160 [ 353.676447][T22398] ? kfree+0xf0/0x1e0 [ 353.680603][T22398] __vmalloc_node_range+0x1df/0x540 [ 353.686601][T22398] ? kmem_cache_alloc_node+0x1bc/0x310 [ 353.692163][T22398] dup_task_struct+0x483/0x750 [ 353.697677][T22398] ? copy_process+0x40b/0x2e60 [ 353.702849][T22398] copy_process+0x40b/0x2e60 [ 353.707769][T22398] ? pcpu_alloc_area+0x574/0x590 [ 353.713664][T22398] ? io_wq_worker_cancel+0x150/0x150 [ 353.718991][T22398] create_io_thread+0x81/0xa0 [ 353.723680][T22398] ? io_wq_worker_cancel+0x150/0x150 [ 353.729041][T22398] io_wq_fork_manager+0xac/0x170 [ 353.734019][T22398] io_wq_create+0x447/0x5c0 [ 353.738695][T22398] io_uring_alloc_task_context+0x159/0x290 [ 353.745728][T22398] ? io_free_work+0x30/0x30 [ 353.750632][T22398] ? tctx_task_work+0x3a0/0x3a0 [ 353.755682][T22398] io_uring_add_task_file+0x1c6/0x200 [ 353.761391][T22398] __se_sys_io_uring_enter+0x1ef/0xb10 [ 353.767072][T22398] ? fput+0x2d/0x130 [ 353.771046][T22398] __x64_sys_io_uring_enter+0x74/0x80 [ 353.776550][T22398] do_syscall_64+0x39/0x80 [ 353.781268][T22398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 353.787176][T22398] RIP: 0033:0x466459 [ 353.791216][T22398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 353.811854][T22398] RSP: 002b:00007fd971508188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 353.820467][T22398] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 353.833604][T22398] RDX: 0000000000000000 RSI: 0000000000003edb RDI: 0000000000000003 [ 353.841906][T22398] RBP: 00007fd9715081d0 R08: 0000000000000000 R09: 0000000000000000 [ 353.850323][T22398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.858983][T22398] R13: 00007ffcf2164a6f R14: 00007fd971508300 R15: 0000000000022000 [ 353.869385][T22398] Mem-Info: [ 353.873320][T22398] active_anon:275 inactive_anon:238930 isolated_anon:0 [ 353.873320][T22398] active_file:5975 inactive_file:110297 isolated_file:0 [ 353.873320][T22398] unevictable:768 dirty:147 writeback:25 [ 353.873320][T22398] slab_reclaimable:10550 slab_unreclaimable:31336 [ 353.873320][T22398] mapped:60630 shmem:6072 pagetables:5581 bounce:0 [ 353.873320][T22398] free:1515995 free_pcp:1147 free_cma:0 [ 353.914118][T22398] Node 0 active_anon:1100kB inactive_anon:955252kB active_file:23776kB inactive_file:441188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:242520kB dirty:588kB writeback:100kB shmem:22284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 577536kB writeback_tmp:0kB kernel_stack:7312kB pagetables:22320kB all_unreclaimable? no [ 353.947711][T22398] Node 1 active_anon:0kB inactive_anon:468kB active_file:124kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 353.984888][T22398] Node 0 DMA free:15904kB min:176kB low:220kB high:264kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.020605][T22398] lowmem_reserve[]: 0 2862 3821 3821 3821 [ 354.028029][T22398] Node 0 DMA32 free:1961004kB min:32808kB low:41008kB high:49208kB reserved_highatomic:0KB active_anon:108kB inactive_anon:423152kB active_file:1804kB inactive_file:223804kB unevictable:0kB writepending:300kB present:3129332kB managed:2936716kB mlocked:0kB bounce:0kB free_pcp:2612kB local_pcp:1304kB free_cma:0kB [ 354.059688][T22398] lowmem_reserve[]: 0 0 959 959 959 [ 354.065662][T22398] Node 0 Normal free:44600kB min:11000kB low:13748kB high:16496kB reserved_highatomic:0KB active_anon:992kB inactive_anon:529896kB active_file:21972kB inactive_file:216500kB unevictable:1536kB writepending:388kB present:1048576kB managed:982572kB mlocked:0kB bounce:0kB free_pcp:2440kB local_pcp:1368kB free_cma:0kB [ 354.099390][T22398] lowmem_reserve[]: 0 0 0 0 0 [ 354.106427][T22398] Node 1 Normal free:4044932kB min:46120kB low:57648kB high:69176kB reserved_highatomic:0KB active_anon:0kB inactive_anon:468kB active_file:124kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119864kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 354.135579][T22398] lowmem_reserve[]: 0 0 0 0 0 [ 354.140514][T22398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 354.154979][T22398] Node 0 DMA32: 473*4kB (UM) 98*8kB (UM) 67*16kB (ME) 40*32kB (UME) 27*64kB (UME) 18*128kB (UME) 9*256kB (ME) 4*512kB (M) 6*1024kB (ME) 4*2048kB (UME) 472*4096kB (UM) = 1961060kB [ 354.173419][T22398] Node 0 Normal: 3563*4kB (M) 762*8kB (M) 467*16kB (M) 248*32kB (M) 94*64kB (M) 12*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 44588kB [ 354.189548][T22398] Node 1 Normal: 3*4kB (ME) 3*8kB (ME) 2*16kB (UM) 4*32kB (ME) 1*64kB (E) 1*128kB (U) 3*256kB (UME) 2*512kB (ME) 0*1024kB 2*2048kB (UM) 986*4096kB (M) = 4044932kB [ 354.207193][T22398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.217109][T22398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.227073][T22398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.237572][T22398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.247360][T22398] 52661 total pagecache pages [ 354.252229][T22398] 0 pages in swap cache [ 354.256701][T22398] Swap cache stats: add 0, delete 0, find 0/0 [ 354.263381][T22398] Free swap = 0kB [ 354.267283][T22398] Total swap = 0kB [ 354.271239][T22398] 2097051 pages RAM [ 354.275208][T22398] 0 pages HighMem/MovableOnly [ 354.280084][T22398] 83287 pages reserved [ 354.284262][T22398] 0 pages cma reserved 14:32:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:05 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4888}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:05 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x8005, @dev, 0x3}, 0x1c) 14:32:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x88480000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:05 executing program 1: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000080)={0x3, 0x2, 0x3f0, 0x6, 0x2, 0x8}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='block=0x0000000000000400']) open(&(0x7f0000000040)='./file1\x00', 0x101083, 0x40) 14:32:05 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 14:32:05 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5865}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 355.586014][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 355.586027][ T36] audit: type=1800 audit(1618324325.501:707): pid=22420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15415 res=0 errno=0 [ 355.631399][T22426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:05 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x80fe, @dev, 0x3}, 0x1c) [ 355.657768][T22425] ISOFS: Unable to identify CD-ROM format. [ 355.674076][ T36] audit: type=1800 audit(1618324325.501:708): pid=22420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15415 res=0 errno=0 [ 355.679398][T22434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.724612][ T36] audit: type=1800 audit(1618324325.641:709): pid=22439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14754 res=0 errno=0 [ 355.755710][T22425] ISOFS: Unable to identify CD-ROM format. 14:32:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='btrfs_convert_extent_bit\x00', r1}, 0x10) [ 355.788041][ T36] audit: type=1800 audit(1618324325.701:710): pid=22439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14754 res=0 errno=0 14:32:05 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xc405, @dev, 0x3}, 0x1c) 14:32:05 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 355.928675][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 355.994116][T22445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.017888][ T36] audit: type=1800 audit(1618324325.931:711): pid=22480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15419 res=0 errno=0 14:32:06 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x8, 0x4, @thr={&(0x7f0000000040)="b6df0da03d85ffb2aabb5cd072dbe0ffce4aaf0faf82329ba835b55ec1", &(0x7f0000000200)="2238fef2c87e20962694dbc1febe9f7a4b29d98c051e4e0e4082b03a1f3fb5efced0df29f2c178ff572d382384fdbcbad21ac5838e8973465b376611689df93442efd7464deecb941aac66f492e0a10d3cfa8a4b41a2e99a01cbca49cb9595d4852d8ed57843457272540eb55c15f7d567d0da7d3dfd11294fd59bdf1607f7f3cf40865fc6ce"}}, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:06 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1046, 0x0, 0x0, 0x0, 0x0) 14:32:06 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xe803, @dev, 0x3}, 0x1c) 14:32:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x8b1cd4c0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xc405, @dev, 0x3}, 0x1c) 14:32:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6558}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 356.100692][ T36] audit: type=1800 audit(1618324325.941:712): pid=22480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15419 res=0 errno=0 14:32:06 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000240)=0xe8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x80000, &(0x7f0000000280)={[{@huge_advise='huge=advise'}, {@huge_always='huge=always'}, {@huge_never='huge=never'}, {@size={'size', 0x3d, [0x39, 0x78]}}, {@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, 0xee00}}], [{@smackfsdef={'smackfsdef', 0x3d, ',^!'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r0}}]}) acct(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 14:32:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 356.175300][ T36] audit: type=1800 audit(1618324326.081:713): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15438 res=0 errno=0 [ 356.202382][T22500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:06 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfc00, @dev, 0x3}, 0x1c) [ 356.219864][ T36] audit: type=1800 audit(1618324326.091:714): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15438 res=0 errno=0 14:32:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:06 executing program 1: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x3, &(0x7f0000004f80)=[{&(0x7f0000002b80)="06", 0x1, 0x10001}, {0x0}, {&(0x7f0000002c00)="f9", 0x1}], 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x72c0}, 0x16, 0x3) [ 356.308828][ T36] audit: type=1800 audit(1618324326.221:715): pid=22517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15432 res=0 errno=0 14:32:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8847}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 356.409666][T22527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 356.421409][ T36] audit: type=1800 audit(1618324326.221:716): pid=22517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15432 res=0 errno=0 [ 356.459060][T22532] loop1: detected capacity change from 0 to 256 [ 356.551438][T22532] loop1: detected capacity change from 0 to 256 14:32:06 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40c000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r6, r5) io_submit(0x0, 0x4, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, &(0x7f00000000c0)="386bf7ed9c5c6da42c38", 0xa, 0x0, 0x0, 0x1, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f0000000340)="cac1d15eee530bc1bf9efea3b7505c2d5e497b338d1de5e3a2cd08818ecb8135701cc8dd9e8882be2782241839e47ad8cc6a882414df12445e00cf820df0457fb2ad5e830b277b1a504623a9fb033b1c9de8798c2f39aee5b6613322d636906451bc4c7a06056c7cbf5d29aed8353f811f312ccdd53cfcce65be6378dc54b73ad7a536c67333a8d601ca5e7aecd6fa29458518b9b5624455ab4e8e8f52105ab75730916821f8ae71942e15423a00ae23d7e858eca3db5f5bdf3ecb5653a6c6db1cc84783be57748c910281049c5f89d390e0213d95ce59532fa01481e98b71", 0xdf, 0x0, 0x0, 0x1, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000440)="9b76bb688c3fc056be5fbecaaa10b6b9ea2e641e6247ef2726c4d9391e8d4ce4bdf5e59352aab621bde32caca1b1962ae449488b8fb808f85d8c5c62490f40113196f151ff3e5481c09b01db82203a640bf5c6c960f5a6db96ac70d1fba91d80b65be7e3a92ab2426c5d244013bb0a198151", 0x72, 0x1, 0x0, 0xa07ba1fd0efc293e}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000540)="822d06c39c8458e7ee3331318f56eeb6b3eaa4332cf29c7d5be72a061e4cc2710a2e35a8fce070b82cd50179ed21b3ed827860", 0x33, 0x0, 0x0, 0x2, r6}]) 14:32:06 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfe80, @dev, 0x3}, 0x1c) 14:32:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xc0d41c8b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8848}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:06 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 14:32:06 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x5b9b, &(0x7f0000000400), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_FSYNC, 0x100) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5437, 0x0) 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xff00, @dev, 0x3}, 0x1c) [ 357.043286][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xefffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:07 executing program 1: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001fa756574687c671635e183998e65a1c2a5e7da1d4bb32c08ca7e2a1afbff4cb603c8e2bbdfe4c46ed300f20b85e4384e19d1c43c66006601df310cf2390afde5ecce8312b3ed26b74dccedf5136c7c9ca7cff62282f758cc69a1d817549fbab047126de1abf85ee82f08e5588ba852c1fa30d6edc5901134fea063450a3bafb7c7b6099be9d7bd052eef209f1f7083f6d535f92b972eebbe2b1b30d9a26e15279a2c2d8ae68756725e0c771cb23e62741110cd65ace4a3b691cb74c09daae6c99e6cfc001cada929fb3cbd875d995cde6d9c54720e73fc23b5364617c6c505ed8a07ea"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002800310f00"/20, @ANYRES32=r5, @ANYBLOB="000000000000ff"], 0x54}}, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newnexthop={0x68, 0x68, 0x10, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x3, 0x0, 0x2d}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r1}}}, @NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0xd}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r5}]}, 0x68}}, 0x40810) [ 357.141764][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x100000, @dev, 0x3}, 0x1c) 14:32:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x1000000, @dev, 0x3}, 0x1c) [ 357.283106][T22603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.314308][T22603] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = dup3(r0, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000000000000700000000010000fdffff99015b0000020000000000000001000080"]) dup2(r4, r2) 14:32:07 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000340)="6b1572d0b09f0ca5a63ac35b8b42d06fd027f1fdca52cb70ca947f901fad0db23fe9b301e4118032cc7b70ac1534ccfc56994abccd32c6fd3bc82a4191a551da07", 0x41}, {&(0x7f00000003c0)="a4a4ff7257a7aceb6e70691ce3996397648f204c76b9b8b67cadf99b1e3310534000361dc71ee1fb0756fac573ef9d9ba0f692b8ebb6f9e34a4dbbd15cdbcd6c6dd65890eafd281504ac6a71cd8df9c6f0831cadd9d10313e7477d2fb6c30b74dc2e6f49ad52937fb6b64fe2fb30d4d74af8d9089f3e03266d813ccd99678d47e69469423804f728a7e862ec7d30dff50abdc72fabf9d60f3c0a1bb496988b4e70d626d6686794b2a0dc736553a1af74e745c1edc164540aafbf1dcf77905be12135ce4cfc2b", 0xc6}], 0x2, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, r1, r1]}}], 0xc8, 0x8000}], 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:07 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x2, 0x0, 0x0, 0x0) 14:32:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x2000000, @dev, 0x3}, 0x1c) [ 357.495129][T22634] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 14:32:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x3000000, @dev, 0x3}, 0x1c) 14:32:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x4000000, @dev, 0x3}, 0x1c) 14:32:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 0: timer_create(0x4, &(0x7f0000000300)={0x0, 0x4, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x4a57329d974f843d, &(0x7f0000001640)={{0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{r1, r2+60000000}}, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x20, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) timer_settime(r3, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) fcntl$lock(r4, 0x5, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) fchown(0xffffffffffffffff, 0x0, 0x0) 14:32:07 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x8, 0x0, 0x0, 0x0) 14:32:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:07 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x5000000, @dev, 0x3}, 0x1c) 14:32:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xffffff81, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:07 executing program 1: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000000012000c00010076657468694ee0199283d13dec7ac1daaa142dd7da27156d644d6fa86a7c4aea3bd79e69fa83611714c906bbde251f3372bdd4bb0080fef1606549ecef3b04c830bcce1afee43b3bb60acdd2b1c765fb2d8c38289ed7848bb7dd3e034ff8a8c35e362f6d0f709323208b078342f7e53c825e2fa5583796e4b9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002800310f00"/20, @ANYRES32=r5, @ANYBLOB="000000000000ff"], 0x54}}, 0x0) lseek(r4, 0x2, 0x4) fchdir(r1) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf25050000002c009dc0080001070000000008000100000008000100070000000800020009000000080900000000"], 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 14:32:07 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000000c0)={{}, {r2, r3+10000000}}, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x6000000, @dev, 0x3}, 0x1c) [ 358.092351][T22728] bridge0: port 3(ip6gretap0) entered blocking state [ 358.103617][T22728] bridge0: port 3(ip6gretap0) entered disabled state [ 358.118929][T22728] device ip6gretap0 entered promiscuous mode [ 358.127461][T22728] bridge0: port 3(ip6gretap0) entered blocking state [ 358.134326][T22728] bridge0: port 3(ip6gretap0) entered forwarding state [ 358.151997][T22739] device ip6gretap0 left promiscuous mode [ 358.158167][T22739] bridge0: port 3(ip6gretap0) entered disabled state 14:32:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 358.197520][T22728] bridge0: port 3(ip6gretap0) entered blocking state [ 358.205487][T22728] bridge0: port 3(ip6gretap0) entered disabled state [ 358.226183][T22728] device ip6gretap0 entered promiscuous mode [ 358.235401][T22728] bridge0: port 3(ip6gretap0) entered blocking state [ 358.242523][T22728] bridge0: port 3(ip6gretap0) entered forwarding state 14:32:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x7000000, @dev, 0x3}, 0x1c) [ 358.279753][T22753] device ip6gretap0 left promiscuous mode [ 358.290273][T22753] bridge0: port 3(ip6gretap0) entered disabled state 14:32:08 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)) clone(0x884200, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x3}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 14:32:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x8000000, @dev, 0x3}, 0x1c) 14:32:08 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xd, 0x0, 0x0, 0x0) 14:32:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xffffffef, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="010903000000000000000000000000000800020000000000", @ANYRES32=0x0, @ANYBLOB='*\x00\x00\x00'], 0x20}}, 0x0) 14:32:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x9000000, @dev, 0x3}, 0x1c) 14:32:08 executing program 0: timer_create(0x6, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:08 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="e125a6335d7d6a5f"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000005c0)) syz_mount_image$zonefs(&(0x7f0000000080)='zonefs\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x5, &(0x7f00000004c0)=[{&(0x7f00000002c0)="714e14935605c6822d75d22c80033f616ae9ec91073250b1ce9a59d1805d278bff73b57d81604b6f5e835111", 0x2c, 0x5}, {&(0x7f0000000300)="bc47e38e810ef87dc03e2fa7ffef0d66fb9fdf4123d1c0130aef2452c1154b1fb99fcd8c50d69e2bae9be104d0edf81c6f40ac56a08e7fe7ae501857c9a04e538b35da77cf4e33f722a081ce615240b45ac1b892544717c15f27e9d15a872f0a4e66f28b1d180640dfc6533647f916d6d374851223b14b1701f2d9f7e71c3386eaf24b8090", 0x85, 0x9}, {&(0x7f00000003c0)="e73e78c4fd55e60c537157cda0717ba1115196668494d943daa8a96612db2af43a47c5f9c0ad9fcbf4b17fe8d74072baaa8b1e4f0391022263db73186d3e18ba55e30824", 0x44, 0x3}, {&(0x7f0000000440)="4013292a3ece8eb0938d75c24bc7", 0xe, 0x6}, {&(0x7f0000000480)="8f6036d1d98fce567a798f0a3f527a2f017b8522d30bebae2b89f007224f74837ec710393294220ba4ef7346ec69a9c2f499c3bbe2468a1a18c2", 0x3a, 0xffffffffffff8001}], 0x8c0428, &(0x7f0000000540)={[{@errors_repair='errors=repair'}], [{@audit='audit'}, {@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '}+*'}}, {@audit='audit'}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 14:32:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xa000000, @dev, 0x3}, 0x1c) 14:32:08 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x10, 0x0, 0x0, 0x0) [ 358.987627][T22831] loop1: detected capacity change from 0 to 264192 14:32:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xe000000, @dev, 0x3}, 0x1c) 14:32:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:09 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xf000000, @dev, 0x3}, 0x1c) [ 359.093982][T22840] loop1: detected capacity change from 0 to 264192 14:32:09 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xd, 0x0, 0x0, 0x0) 14:32:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:11 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x10000000, @dev, 0x3}, 0x1c) 14:32:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:11 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x30, 0x0, 0x0, 0x0) 14:32:11 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0xc5345000) io_cancel(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000280)={{r4, r5+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000140)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:11 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xd, 0x0, 0x0, 0x0) [ 362.009425][T22915] __nla_validate_parse: 19 callbacks suppressed [ 362.009439][T22915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 362.025964][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 362.025977][ T36] audit: type=1800 audit(1618324331.921:741): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15462 res=0 errno=0 14:32:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x11000000, @dev, 0x3}, 0x1c) [ 362.136483][ T36] audit: type=1800 audit(1618324332.051:742): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15462 res=0 errno=0 14:32:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:12 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x20000000, @dev, 0x3}, 0x1c) [ 362.245802][T22948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:12 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x8, r2}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:12 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0xc5345000) io_cancel(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000280)={{r4, r5+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000140)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 362.288656][ T36] audit: type=1800 audit(1618324332.201:743): pid=22950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15457 res=0 errno=0 14:32:12 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x42, 0x0, 0x0, 0x0) 14:32:12 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x2c010000, @dev, 0x3}, 0x1c) [ 362.387166][ T36] audit: type=1800 audit(1618324332.301:744): pid=22950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15457 res=0 errno=0 14:32:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 362.499216][ T36] audit: type=1800 audit(1618324332.411:745): pid=22974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15457 res=0 errno=0 14:32:12 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x60}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x3f000000, @dev, 0x3}, 0x1c) [ 362.541773][T22982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 362.561881][ T36] audit: type=1800 audit(1618324332.441:746): pid=22974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15457 res=0 errno=0 14:32:12 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x30, 0x0, 0x0, 0x0) 14:32:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:12 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x300}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 362.681060][ T36] audit: type=1800 audit(1618324332.561:747): pid=22996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15451 res=0 errno=0 14:32:12 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x40000000, @dev, 0x3}, 0x1c) [ 362.774270][T23008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 362.776755][ T36] audit: type=1800 audit(1618324332.571:748): pid=22996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15451 res=0 errno=0 [ 362.887504][ T36] audit: type=1800 audit(1618324332.751:749): pid=23014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15461 res=0 errno=0 [ 362.936013][ T36] audit: type=1800 audit(1618324332.761:750): pid=23014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15461 res=0 errno=0 14:32:13 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x2, &(0x7f0000001500)={0x0, 0x26, 0x1}, &(0x7f0000001540)) timer_settime(r1, 0x1, &(0x7f0000000440)={{r2, r3+60000000}, {0x0, 0x989680}}, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) r5 = mq_open(&(0x7f0000000040)='\x00', 0x2, 0x28, &(0x7f00000000c0)={0x6, 0x4, 0x9, 0x8}) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000000500)="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", 0x1000, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x5, r4, &(0x7f0000000340)="ab09b0725a5d19752b8374f3eb76b4324fb78d9ba31cc99fb3030db58909361401d37943e907aac40c43d506a9670a86f1c03a928c1ad3d39bf8813cc325f1180b5cde56a169c5087727e68b1f079b9b6b356e0a4139d23e5f44d961e619eade2de19f17cde94a936fb2020bc80fa5aa494631a63d24b6dc7d1e6a634c8f7eca8eff45582d33bc3e534f20ecc736dacb89b9a66265c556935aae07456ad2b96d9e2757e3d10bf0998f1081d120f5bdb2079365563b83ec57e71d1641e36fee7dad1e9a5eb7baa4a123de72d937116f99ff40f739e5f3e9cbe833377388261b65b7bc9899e4d6a50352450cf6e09bf41588a28618824d2d", 0xf7, 0x0, 0x0, 0x2}]) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:13 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x500}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:13 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x1aa, 0x0, 0x0, 0x0) 14:32:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x6, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:13 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x44000000, @dev, 0x3}, 0x1c) 14:32:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:13 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x58000000, @dev, 0x3}, 0x1c) [ 363.169729][T23043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.196144][T23045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:13 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x10, 0x0, 0x0, 0x0) 14:32:13 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x600}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x7, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:13 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x60000000, @dev, 0x3}, 0x1c) 14:32:13 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x700}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 363.403473][T23078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:14 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {r1, r2+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x8, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x900}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x80050000, @dev, 0x3}, 0x1c) 14:32:14 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x204, 0x0, 0x0, 0x0) 14:32:14 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x1aa, 0x0, 0x0, 0x0) 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x8dffffff, @dev, 0x3}, 0x1c) [ 364.159164][T23114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x9, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xc4050000, @dev, 0x3}, 0x1c) 14:32:14 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x60000000, @dev, 0x3}, 0x1c) [ 364.377691][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xe0ffffff, @dev, 0x3}, 0x1c) 14:32:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xa, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001580)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001540)={0x0, 0x14, &(0x7f0000001500)={0x0}}, 0x4000084) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000013c0)={'tunl0\x00', &(0x7f0000001380)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x6, 0x2, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @empty, {[@end]}}}}}) sendmsg$nl_route(r4, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=@ipv4_deladdr={0x48, 0x15, 0x10, 0x70bd2a, 0x25dfdbfc, {0x2, 0x3f, 0x41, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0x1, 0x40, 0x40}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0xfffffffa, 0x7, 0x2f4f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x2c}}, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f00000033c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611228e1ffffffff9400000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x14804014}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=@deltclass={0x4c, 0x29, 0x410, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc}, {0x7, 0xfff2}, {0x10, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x81}}, @tclass_kind_options=@c_cbs={0x8, 0x1, 'cbs\x00'}, @tclass_kind_options=@c_cbs={0x8, 0x1, 'cbs\x00'}, @TCA_RATE={0x6, 0x5, {0x80, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x40040) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x9, 0xffff8001) 14:32:14 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6796aab348000000100000000000cc600771f300", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) clock_gettime(0x0, &(0x7f0000001fc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x5}, {{&(0x7f0000001940)=@alg, 0x80, &(0x7f000001ed00)=[{&(0x7f0000001580)=""/3, 0x3}, {&(0x7f00000015c0)=""/29, 0x1d}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f000001ec00)=""/221, 0xdd}, {&(0x7f0000005440)=""/82, 0x52}], 0x5, &(0x7f000001ed80)=""/102400, 0x19000}, 0x1}, {{&(0x7f0000001680)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f00000017c0)}, 0x26}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001880)=""/125, 0x7d}], 0x1, &(0x7f0000005b80)=""/122, 0x7a}, 0x401}, {{&(0x7f00000019c0)=@can, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/122, 0x7a}, {&(0x7f0000001b00)=""/227, 0xe3}], 0x2}, 0x9}, {{&(0x7f0000001c40)=@isdn, 0x80, &(0x7f00000041c0)=[{&(0x7f0000001cc0)=""/69, 0x45}, {&(0x7f0000001d40)=""/181, 0xb5}, {&(0x7f0000001e00)=""/202, 0xca}, {&(0x7f0000001f00)=""/116, 0x74}, {&(0x7f0000001f80)=""/40, 0x28}, {&(0x7f0000004040)=""/114, 0x72}, {&(0x7f00000040c0)=""/207, 0xcf}], 0x7}, 0x2}, {{&(0x7f0000004240)=@hci, 0x80, &(0x7f0000005880)=[{&(0x7f00000042c0)=""/190, 0xbe}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/152, 0x98}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f00000054c0)=""/196, 0xc4}, {&(0x7f00000055c0)=""/234, 0xea}, {&(0x7f00000056c0)=""/158, 0x9e}, {&(0x7f0000005780)=""/212, 0xd4}], 0x8, &(0x7f0000005900)=""/65, 0x41}, 0x8}], 0x7, 0x80010000, &(0x7f0000005b40)={r5, r6+10000000}) 14:32:14 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x255, 0x0, 0x0, 0x0) 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xe8030000, @dev, 0x3}, 0x1c) [ 364.659667][T23176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xf5ffffff, @dev, 0x3}, 0x1c) 14:32:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xb, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x410100, 0x8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/65, 0xa2}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000440)=""/128, 0x80}], 0x7, 0xfffffff3, 0x7) mmap(&(0x7f000045f000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x81, 0x4) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x12fc1, 0x100}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000640)={{r2}, 0x0, 0xc, @unused=[0x10000, 0x2, 0x0, 0x2], @subvolid=0x1ff}) 14:32:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xc, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfc000000, @dev, 0x3}, 0x1c) 14:32:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4788}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:14 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f00000007c0)='./file1/file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r4, r3) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000000)={0x2, 0x200, 0x2}) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./bus\x00', 0x6, 0x2) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 14:32:14 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x402, 0x0, 0x0, 0x0) 14:32:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xf, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfe800000, @dev, 0x3}, 0x1c) 14:32:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4888}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:17 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f00000007c0)='./file1/file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r4, r3) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000000)={0x2, 0x200, 0x2}) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./bus\x00', 0x6, 0x2) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 14:32:17 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x406, 0x0, 0x0, 0x0) [ 367.685490][T23258] __nla_validate_parse: 6 callbacks suppressed [ 367.685504][T23258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfe80ffff, @dev, 0x3}, 0x1c) 14:32:17 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000001500)={0x3, 0x70, 0x7, 0x0, 0x1f, 0xe0, 0x0, 0x8, 0x45205, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000440), 0x3}, 0x12000, 0x4, 0x5, 0x3, 0x0, 0x157, 0x401}, 0x0, 0xf, 0xffffffffffffffff, 0xa) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) r2 = syz_io_uring_setup(0x9c3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x4, 0x800, 0x1, {0x0, r5}}, 0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x900, 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3f, r1, &(0x7f0000000500)="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", 0x1000, 0x20, 0x0, 0x3, r6}, &(0x7f0000000280)) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) [ 367.741889][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 367.741911][ T36] audit: type=1800 audit(1618324337.661:767): pid=23264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15506 res=0 errno=0 14:32:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5865}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x10, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 367.873055][ T36] audit: type=1800 audit(1618324337.691:768): pid=23264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15506 res=0 errno=0 14:32:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfec0ffff, @dev, 0x3}, 0x1c) [ 367.956241][T23289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 368.005771][ T36] audit: type=1800 audit(1618324337.881:769): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15511 res=0 errno=0 14:32:18 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfe80ffff, @dev, 0x3}, 0x1c) 14:32:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x11, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xff000000, @dev, 0x3}, 0x1c) 14:32:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 368.105361][ T36] audit: type=1800 audit(1618324338.001:770): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15511 res=0 errno=0 [ 368.192996][T23309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:18 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x604, 0x0, 0x0, 0x0) 14:32:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xffff0000, @dev, 0x3}, 0x1c) [ 368.237796][ T36] audit: type=1800 audit(1618324338.151:771): pid=23316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15507 res=0 errno=0 14:32:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6558}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:18 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x406, 0x0, 0x0, 0x0) [ 368.302076][ T36] audit: type=1800 audit(1618324338.181:772): pid=23316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15507 res=0 errno=0 [ 368.362928][ T36] audit: type=1800 audit(1618324338.281:773): pid=23333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15501 res=0 errno=0 [ 368.405060][ T36] audit: type=1800 audit(1618324338.311:774): pid=23333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15501 res=0 errno=0 14:32:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x60, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xffff80fe, @dev, 0x3}, 0x1c) 14:32:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:18 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x406, 0x0, 0x0, 0x0) 14:32:18 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xd00, 0x0, 0x0, 0x0) 14:32:18 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={&(0x7f0000000040)="790da75bc4f54864469edcb47793a15b87", &(0x7f0000000440)="50c1e39fd6aa53924a"}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x17, 0x1, @thr={&(0x7f00000003c0)="70e2d06be8f86c3037355c630d1fdb3d15a5a1504cc7ed614b490d7ba368a0a180dbb51fdde410635a3323bd716a5aa7d44501bcec82687500338a060e4b5c71af0ca9c8071b3b32d6d6a6903b2a81aaa798bfa76d20", &(0x7f0000000200)="32b3579e56232331b7bfd4496912e00731fc9741e6d81a38d8cdd444f992790851612a0e0924159a259d9b0e5080c4710de6d0fd15736837648940256c0165268287c5ca5bd9b55b9ab4257a9fcf0cf95eee95401d7dbf164e0d10599b4a441cb39e45363dab8f5ec252fd12ec4173cb0f47375641cb65a5a993a389a170"}}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, &(0x7f00000002c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = dup2(r4, r3) io_uring_enter(r5, 0x955, 0xebf1, 0x0, &(0x7f0000000380)={[0x8]}, 0x8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080000) 14:32:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xffffc0fe, @dev, 0x3}, 0x1c) [ 368.879796][T23362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 368.894378][ T36] audit: type=1800 audit(1618324338.812:775): pid=23359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15508 res=0 errno=0 14:32:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8847}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x300, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 368.978649][ T36] audit: type=1800 audit(1618324338.852:776): pid=23359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15508 res=0 errno=0 14:32:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8848}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xffffff8d, @dev, 0x3}, 0x1c) [ 369.118023][T23392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:19 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfec0ffff, @dev, 0x3}, 0x1c) 14:32:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x500, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xffffffe0, @dev, 0x3}, 0x1c) 14:32:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x10, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 369.299388][T23415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 369.380967][T23430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:32:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x600, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:21 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x1046, 0x0, 0x0, 0x0) 14:32:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xfffffff5, @dev, 0x3}, 0x1c) 14:32:21 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xd00, 0x0, 0x0, 0x0) 14:32:21 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000200)="80452ace1a95fcc91aabe420c5929a403141304e29be8d781a08adbc0610e6ae551b626f9a37e30155eacb107f43e7b1f09e966723ba3d1edfc77cfa7d9ac648831233a365cac711a187e8695ae20d6cbfdf0c50d864", &(0x7f0000000340)="39d061c84a438d4dfb9ebc32cf06e0f52b159ca64be31289ea1570be6685de341f0f816463cd7541aed1f858b311afdabfaee483d559d71cb5efab4ef8626c8e8453422741736d7d75519995575d56f29b098bdbe064acb3056108acf0ff958577e5c5555c6cf26c260740af1d24a5edf2a060e64550aa2c8e750f8a30306895b59e12880d"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000001680)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {r4, r5+60000000}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r8, r9+10000000}, {r10, r11+60000000}}, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000002000)) fcntl$lock(r7, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) timer_create(0x6, &(0x7f0000001600)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000540)="6c30da52c7ac96f09182d5dbb5e218d28adedbc861bed47d0663a26888bcc3d693512437b247475e36ab337835f873a042c8aadd71f558d200637eaa2e9f0cc52b39830b49cce5518e7925e76ec2b68257f087ad2f9d50d6fe9e23593ff2b5bbce81ecf4f106392998aed73404d9262bed01d42a415fb53906fd482f451c2f8f8f534d3fd6ce271d15f4d3b444a27a25dbf239ea9220b648ccc199744b1b589d165ea7cb2098ca8af801f52ca7e75b5d0dd63c61b186f4e7de870caf44b0a702", &(0x7f0000000600)="d9232739d992f94587f1dc8cb8f0395316f9a187ecf8f7b8da8643f5f5f351651bd37cd6186272fb45efe909d17e6327414313257f221e3e07ae10379329b1de667403d8e3fad39d3b06b7de457576819b366683404423cc86f9f78bd2591c51e0f354b06be60374303cd1418d12f89e5716931bde160743acb0cdd9015c7f7d71c9054efade6c2c1b549305a8eb020abf6d9f4c2b7b5d94bbe438dc626677b61a476fcf91064cc7e1e7b80dbd688b88fddaa05c548b07490f18062e11f7fd801811f24f53cf6d21026c64fcf70c89d0e7061e513950b95a9d7c5643010d444c1bf7fee095551c9afdff7ca1916e7827f20eade6c629b434c53287dc8773a97d8745c410dffd4e45733523e5c71127f2b9a79968e8ab8a51f899a0b74c66d4bd2870d0be3ddca445b13cf3d27a493679a78f40f94c6afc0852a246dca4db0a3e07a5efc62be12acb2e074396af79ee073ad2676fffea3b83bb60aca5d0e6d65cc6ece19312b653aefcb6618d41706ca55e2b7a9b0fb5bec164f63ea01f90eae54bcf1b0641c36043436a364f2f1bcdab1b020e236c2086d188728f5372d9c554d26c0490ddad50384a9dfc0a6740424017d81cedd6f5a9b5509eab8ea00e8dc33a4422fe9200bf807f088ba671d9a1dbf10e6ac550b64d1850a2792927308f9519b3ec6fe0b375a1c96032d89af295f17cb947d4de337876daf0b43770135a6c19f948d67e7500e9399f58b3ca8847d4bee6fafe17dd457e8b9064b2741a5e67c887ceb77edd7e3f959b13c5923fa0bf4f4826198aff751891cc9491e8d9f101993f5acbf24e5f28af3afea3e97b176cf08e9ad7a4b2edda10dfaf453c3dcec82a610c4002f82fc37498ed65960a39ed556873cd8b096f2e3540ac578092d68878db0292fe82b004b14dff101f82b72b285ff49a29600267f154a1c978e1f934201edbf11e3fbec2d84050d4c9e85a618b39f045d4017ad7314229ce64839122346c8887d4d969d9f222e038a099ade4d9ce6000159a446b304ce28d03f05713a5f75c64a3bce3696de3a72214293b4f03b90017eb3d483185013d943f12a8af39eb88d9db2bfb5a5d92fe729ffb9b5846ba559c6286bf10013fce69aac80960e6b0364ecd85fe48eaef8c5cbffeea466ee7d9080738381cbbecdf14d3d68cbbb64d28bc6ea79972180d6d26ff6100e310462521f4a782255b3717851693f89fb1b59f7ad4f3f8600f33c476576430886fc4caf5eb8c49285c144f39cc6ac7615d2626b1a9304f206a291226a0b60b7d17b9d44ffcfb8a03a6f72aa4ec29c1bfd117251f7b542b316f34ea514366e83307878edadc59c2792285e520bba044214d6ccc02fb28af778e93cf6a3fd029f04eaf08983c929bcecf31c3ffc88b7ef8b4f5d5a1c476dd87d6679c11a8d19b7215b31ac8852a8d6cdbfc371afbda7d0ebb0749ddc43b7592ce820ba4d58253bf8855d95ece84e14cf908219e802dbed69c68b9e89c22063e198de63f434ca3fa6e507686051b9e4eea6419b38d4e9404f95a57b9bb7dd9017deec57a0669c80875fd2207f0e71d7363cc45dd395acd19dc581da496f590bbc5b4ebe10d5e67b785acb3b7571a7183f074e63991b6ccf9103e7b49d36accdfc370dae1796c2a16a9843fb1b01f48e0ecffbafbff92b8a4bc7284c79d5c243a3ea49b131f0395b24e6befcad2692e3c101e7a278e122f139514c790d20c1c37120fea7b2bf48d9a89c13a580b6a56e4b73aea50fd1558a1cb5141061aed964c1ccf41e28280b6a757a990fe02c6ddcedb783114f2a205bb91f0a4380843ec66ac2bd10102553b0847ac4c1ede3e13a7d4f851702866a5872c11ddad38385dd36fd941c1382d1298a4fd69cf83e08e378bfb1ae92f9a5f48f2cbb41942e9840b3292862edcc89d97bef97142f604ae5f03ba82058cae1902f4fdd6fd32ec427b06613fe5d8d4b313d432f4802a550592fb931d95a916bf4e67bcfb813c55635c737dd1a5377bfd3ae1e94683820b8787cba284aeb80528e064d241ae58499260ee5a25ba5cff75c8ebe193796e20827f72552ab2a718a24767ede5c3becaca3e6fd495d28bbf9a9ed76009b31d1b34794c6149b6e6f356ebc0b072e4885a8ac00dc9618b070992705ba0a03e01a5f13d4446732d0c433f87bf7dc90b522df74d03c6c9747bdbd60c431fca8191cbbd0feb914c8ca14776887514af47468eb5a23ba46290405157f33634aa1940d3062d0432d90a4db726c68d7a9e2d456068649f270cc3bacb0d75fb0c943a43d055600769ac81085ad6599f07d7367e6c967de10f5e5887e06ea157cd5ca58113393b842700bf1297ab4f7c8d1b91a231941e20e1d261e24d112e9ede42019ddaa44dc08c305ef3cb80f69438a202005b0c0475911c8b17810e9dde86d9319576bdf52d33385f152919512008852a6effdc47335d3737110fcf28f41ba43dde2f4ebbb3550d268957b8aadc53aadd1ee9fbf8e92643c222100a006fff612203d13b77c0c8c5601dbfad4ee2df673d9b26df2fe2df5a9331a2f58df3ae489b75816a086b7dee5886aaee6c200baf9d8dae02cf1ed50c78812fe10049af6cbbb29c736ddc25f560a599f32244783ac407d62023fc45155c8a035e7e701d78a0f4222f44dcd03bff66c0869e66a0459c7d2f36028cd86aafd743631e06eb26b67592146b75337f86bf2c689ab3347b95dedfe6a815c5e938ed252f504ce65c9e7230681f193acb01fb429503f953f785ea22e5d6e047bb0c2791623ef0057b9806afbb10bef896a93a3083039bb5840c1ed7f2c3576c191134c83dee841588b0807391d7db51f3e04ed05d37e5ef9ce193418cc13884fb45a28692999323d62ce8a571c79b6ed4fbc84af16ed2b0adba6c95322ad1e6822160928899307559d65d1ea552840c9201abd4ea5d7bd972066540c0d9dd014f7a172149c6cc2abeccb8c2274e31688cf36bd71aa1b1bc94f5163c5d81363db1fc6937094ec3e4b73c6af81464697073219fca8b1dfc3929cbceec6f320aa644b7da3cccc9bd3122d6673b3e2293d9640bf74eccd832b5336c452b344f0fd8c3bfd816209fce5d4ebb68e50cebdbefd036f013ecbccaeb14a1feda95074626fe86cc08b791108d8d3b564082ed3f8dc8c367feea0246c83cfa059c2c9c1f1d511e8aa8d2dbd0f85a0520571376ea572c2ba8df17ba7b9fa62ae11492b1b8adb2d52d60fffc1527f039bb378f4d4e68e3ee10237d26d23525d788f5aae758b8f9ec7cd7e8cff5ace24330298b5f5e0945974b7ae4a8a1b6a0c7d53966d9afbb44a3107afcde7820165036b3fb742feb27d9d1cfcb26197707ddb6b4bb1175742aae0375d78aa112de97c751b31d49fb9ecebc1786ec2e2b2253624a28f644c303a4c495587fcc44d49f4d38f4dbaff9fecb62c8a8edd46dceaf856a0a5df7a051e53bd84e16889f70e609b898117504386958cc3965180922559289080930f04b5a3a4e925cda438c08c42d1e72d88225644653a61e32552a0b6b8d420ec5aa3c9f07ca1cf0ee6d7fb18c1908a1cf9ea4104bf24385104c8d39e50700283cd4901951d72f64a0d73d185b4a33acec84aeae17c363f94f0caddb5ba10d6f9409750a8073616e2c4dce2b86430568dfef62341c00da83847ab9011b22ede3cc771a7960886868be2966203b6711412aa29c92746eb2e1ce1401aa92c37534f82a30ca5f64695f49f0a3f082277b567f4a70f3f9f4e3aa3b4fcd4b2df97c8503cc1dfe6144b0b76187018072089cad03d6c4af78aef2d3583e4b3adf0d12d1dcff7315ecab8f751893398772adb93bc58393bcbd557affd21c9586236639cf4f2601a1a1621afc4ad0468c4ea6ed7179a412ea25c56c8e95040e5bf5346029181d3a00a1131d644f542c9246a9afd6e72ab633eed4a24fa622d9c4dcc168177a935d7c266b9212e35e07f61ef1f2db170c0a812d3e94f950b4793cf3f1527ad3eb0a7bb6cf547386dd48041cde8e4dfc5dcddc086a75a8366848d3c8b2e02486310decdceedbaa7cdf80d9582e99d83af8a3c3587742e30765544834ce19caeedd78caf2736ac709bf4ebce12110c49ddc1941eddc8a3b946ec72ce52c0ed40f7936edcae2c4d9571d93fe75b959db8f4964687946ed516d014fd7b9d8e24c69477ad529758c6af36f8f82eddb8141bc04d945e5b7d1a9ec1f70f03b2dbf2eb0f032973194df1c12b1b45cd8d78483cbedf4beb9274e49286c23a9d6779d32357d48d7807d4438d36aa35c93e90f102216e89cc94a00f2d11e04b1fc5107a7763810f10c3cea2bef1608e37d74d2de1cb2fcb6495fd1aa1c05b49a7f27fa23cc636744cfbf9a6e3cdcbd3d6a11632afdf95050ce5ded87c9b1e8b3915eec54f739fdd4a6255b6315b619d4edd154b0c22a4158df2074ebf7091865e05957d5accb12f59a88dce3bb457db092687a064e9d8b908e566db9d4b79aaa5eef91a4cd12e699b44f4ab789639a4d6feb95eec371ad52eda4664853101fae21629c2553aac2c4f0e1aeac7bd4228a3fca1a0def05daee43db575a7ff5192145630f7a6cedce38a94e171b99900ff317b7843e7920e32c8c153f1a6bdffce155555c8850e8ec560369dfb0d129ec96b17324a008f92cc18572519d761ea48369a6bbec10952bd44758c019850ba5765fb58dcd2b0af5cd46873cbc47849d2b49b74421041e549e18635c1b7a629103416c9974c7df4e8c0a3c4d30734b37b272ca3b7b4737f9f163ecc23ddbf5432e5d4134d47eae6deba949740186ef7af69556e9ce4420a767c47132574afe003756d3346fe1b64c3f332e822c97358171a1e4e34ef158194260e3caf4971cbbb688ed3d8d029befee042af8811fd1366300500f1b1fd05e8a41c84fe227d3e977ddba3ad71ef76d1b3c33c5b611cf1d5658589409ea67d0cd62aea36119cdb2fb435527ac56852ebc143389ac8961bcf520268b94b8af0dad0e50ef9638ffdd719bae30ebd1b451659cf1bb4cb22001a66f93bf8de883cf563612dc450d06a1925eebe778f1e9da108c1902ad38f6fbe1a41ee43dbd5ea2276226a34f6efbe17502ce3b0f0ff8dc0dc667ad84889e0b687ade9fcef110b7ce0a4e75219a17a7cb9c82da5d912fd3c23b64de935be0a6407f64e8ab0d8f9f7a28937464188ed2f86b6834058141d6f0c7961b4f5cff987f5e51f601d249fb1cfece9dbe095573eb83040fe04741a8e8a04e6a93a57fcf4d15754135c7ff7096145f8e0e3739a624345401d24661293dabb5b446ec4038cad13490e6a230ec07a4191681fb8f7fafbfd35fe2a776f85e23cf677718b47710ead5faf5bf3d1fe20b5feb120f24af2ce0b5154e056602fb51759942a657adfed437d48395947942464b9d3621d4ab407189a0ae93c27213328e6d5b3b2628e6f56e665465bf21835fa3349b3d48e91399295d5d5ea08a2e3ca1410f2e6add37ca5f568bf7fb4fe077a5177fae7534bddc9e7fa8c81ed13c405cecec403f9a1171576eeaf3bd041b1afb7d639f015706f60d3113b5025ce6016450bce9b5ba1cafaf8a3824d6dfef5423b296b1ee02daecf7c5bee120d605594cfe100a4107e5b5be7f561740330cd4628b4688e9ae2c8e4a4ac0e334eb19e0886114fdb2303b7a1d2345f2eec9eeaedd0dff45ec778f9d05a3729def6f1f362646aeb67d002194a221503bc0b85841eec3ff94d46b00fd2863fc90af2c240d03e00be34688af7df0d1351f64f044c4a157c11690cf8ab90e0ef27b02b0b5750c01ae"}}, &(0x7f0000001640)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:21 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 371.904321][T23454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @dev, 0x3}, 0x1c) 14:32:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x700, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:21 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 372.000560][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.006862][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 14:32:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x0}, 0x3}, 0x1c) [ 372.068459][T23481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x900, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:22 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xf, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 372.225397][T23499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:22 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x2000, 0x0, 0x0, 0x0) 14:32:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:32:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xa00, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:24 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000002c0)={{r1, r2+10000000}, {0x77359400}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x80116, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x1, 'syzkaller1\x00', {}, 0xff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) semtimedop(0x0, &(0x7f0000000340)=[{0x2, 0x9, 0x800}, {0x4, 0x7fff, 0x1800}, {0x4, 0xfffc}, {0x2, 0xffe0, 0x800}, {0x4, 0x7, 0x1000}, {0x2, 0x4}], 0x6, &(0x7f0000000380)={0x77359400}) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) io_setup(0x6, &(0x7f0000000280)) open(&(0x7f0000000200)='./file0\x00', 0x40a000, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 14:32:24 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:24 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4888}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:24 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x2]}, 0x3}, 0x1c) 14:32:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xb00, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:24 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x3000, 0x0, 0x0, 0x0) 14:32:24 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x2000, 0x0, 0x0, 0x0) [ 374.920381][T23547] __nla_validate_parse: 2 callbacks suppressed [ 374.920394][T23547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 374.938809][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 374.938821][ T36] audit: type=1800 audit(1618324344.852:791): pid=23551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14161 res=0 errno=0 14:32:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xc00, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:24 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x3]}, 0x3}, 0x1c) 14:32:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 375.079322][ T36] audit: type=1800 audit(1618324344.902:792): pid=23552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14227 res=0 errno=0 [ 375.081968][T23575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x4]}, 0x3}, 0x1c) [ 375.199568][ T36] audit: type=1800 audit(1618324344.902:793): pid=23552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14227 res=0 errno=0 14:32:25 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x3]}, 0x3}, 0x1c) [ 375.293318][ T36] audit: type=1800 audit(1618324345.082:794): pid=23583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14290 res=0 errno=0 [ 375.328858][ T36] audit: type=1800 audit(1618324345.152:795): pid=23583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14290 res=0 errno=0 14:32:25 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000005c0)) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000480)={0x0, 0x33, 0x1, @thr={&(0x7f0000000340)="6494bd8305d33f7981c4bfb3c825f921206194926482bd39d0a6d65a3b10edee5f2e509fc7705bc79c3d15004cfb5c06076b2f907cfe125f836f0fb1c394e8a31809d06fce426b046d9fef28e07b53e6ee86925a", &(0x7f00000003c0)="623a148daa2a90a43e7ad427f95cc097a757b90b938967466c1e0079752c9a66494af9354c6e39fa26a32b3f62f20c59b971b1473606c9c089f7dbe463b177b826051b70bc4c26ed9bd5a7baa541c0c50cad7e500c3ed245b7d7fcdcc850637faf031f40aa9b14129549e74c34c6853a3e2bdfc791b45467bfadac395c4fdf3624ac597f51e1a58e74b8da1982de2965616b6f1d1c86f3e92ff2184df8d546b5d3a91f7986f43ee7aef1e30702eb06"}}, &(0x7f0000000500)) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x1a000, 0x0) r3 = epoll_create1(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x98000, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:25 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x4000, 0x0, 0x0, 0x0) 14:32:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xf00, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x5]}, 0x3}, 0x1c) 14:32:25 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x2]}, 0x3}, 0x1c) 14:32:25 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x402, 0x0, 0x0, 0x0) [ 375.968536][ T36] audit: type=1800 audit(1618324345.882:796): pid=23620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14257 res=0 errno=0 [ 375.994192][T23622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x6]}, 0x3}, 0x1c) 14:32:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x1100, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 376.070775][ T36] audit: type=1800 audit(1618324345.992:797): pid=23620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14257 res=0 errno=0 14:32:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 376.164160][T23649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x7]}, 0x3}, 0x1c) [ 376.209476][ T36] audit: type=1800 audit(1618324346.122:798): pid=23653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14257 res=0 errno=0 14:32:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x2000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 376.278560][ T36] audit: type=1800 audit(1618324346.172:799): pid=23653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14257 res=0 errno=0 [ 376.375809][T23668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:28 executing program 0: timer_create(0x3, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8]}, 0x3}, 0x1c) 14:32:28 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x4200, 0x0, 0x0, 0x0) 14:32:28 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x402, 0x0, 0x0, 0x0) 14:32:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x4788, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x9]}, 0x3}, 0x1c) [ 379.005952][T23691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 379.038831][ T36] audit: type=1800 audit(1618324348.952:800): pid=23697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14274 res=0 errno=0 14:32:29 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x4888, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:29 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xa]}, 0x3}, 0x1c) 14:32:29 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 379.234043][T23725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x5865, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 379.389398][T23741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:31 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xe]}, 0x3}, 0x1c) 14:32:31 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x4000, 0x0, 0x0, 0x0) 14:32:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x6000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:31 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x4610, 0x0, 0x0, 0x0) [ 382.037932][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.065274][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 382.065285][ T36] audit: type=1800 audit(1618324351.982:806): pid=23764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 14:32:32 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xf]}, 0x3}, 0x1c) 14:32:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x6558, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 382.124915][ T36] audit: type=1800 audit(1618324352.022:807): pid=23764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 14:32:32 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:32 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x10]}, 0x3}, 0x1c) [ 382.247068][T23793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.271152][ T36] audit: type=1800 audit(1618324352.192:808): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 14:32:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x8100, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:32 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x60}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 382.376500][ T36] audit: type=1800 audit(1618324352.232:809): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 [ 382.382264][T23811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.454374][ T36] audit: type=1800 audit(1618324352.372:810): pid=23815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 [ 382.514685][ T36] audit: type=1800 audit(1618324352.432:811): pid=23815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 14:32:34 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000040)={0x0, 0x25, 0x4, @thr={&(0x7f0000000340)="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", &(0x7f0000000200)="e01e30fb8fa9f70964554c52bca5963d59350b0ad1e2577e9a866ff650f9bd8e76502df9bbf3ba99f32c6cf6da7592e35acb625bfe5e7e7b5f575eb8e1736762e5da87003d8f"}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000280)) io_setup(0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) io_submit(0x0, 0x5, &(0x7f0000000ac0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x10, 0xffffffffffffffff, &(0x7f0000000500)="a93d7bc2a326decf4ec4ef5568e9f33552b9ab700475b8f854cb36b8da7174f9e42f9a90a15377311bd6384511b3c2cc9aac214c1a6350ed31e5e770eebdb153a0c004397223aa566315873918b9f05122f2f2d265ee726d681d1c54d8e0b51fc51bc2416cf1fec5e19598c405e0b145b0a7c938a8c642a2e4907488f6059301b597d1d18fce7641e360916cf9f7f3c7df7f3fb9397a9126fd2aad81aec30ca82ff0633b7d5fdb5554df9c6ae36fffcbd33ee2a585e56fd972d530c6c23bf2c7e33455c67a22a18438", 0xc9, 0x5, 0x0, 0x3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000600)="86b7921e8e4345cce66d64be864a3d1400ad5a752608acf18c04fe5ceb4da01f50036c55490bdf13345e44ac38c9e000258ed2fe672c38944b7ddaddf0d54309030f46574193a72fb428456c06d39e28e6a21baf8149b51b6c285cd7b647044cacf93bada59c385359c33f1314245d3f6927240e2c1d834d43df7497f5985094a66aadddbae0e391a04fef91cb8fda9a7b112a1a", 0x94, 0x1, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000740)="14807b4f6c6d44b830bde425516124ad8fd18a685e668d63f6286694167531913882001c3be1bf2dd68a857aef6ff561f61afa267a34bd1b67bc44d15c685e87a7e398a029692d857cf7081196dd346e76b26e285e95ef2824f2a4e051a437661d4b7dd136fe64ec2669316d8d08135fe17b333979d77a29145d5e67019641b3befe3a620db3408a08fb6871777d79179bd4efc7d47a9f4d8cb4f701ad70385f14b127bbfe30db93cc4ff814696e2ffc8524c7e629da164970298f6d717f29c7e585b349a334676ee750de8a3af5b6d728a9847f2cbc6e03fd7f80ffdad8c128ecc48d9f3d685687d1d40bd766831fb3d44d0aa8", 0xf4, 0x4, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000880)="d1c228265f4748e24970d55f4c9be83623469f2fef6c31c6bf39bfa0fee784bdc9162be4a030b0baa453c6e89ebd2d2b15331c934c7a49c69f78342efed7c75dd4ec503f811a5d10677614d1705846a219b3f5929609fe6eca6bf065991ee37ed7094753262274aed60cfea8fb5b263651e7da08e8e2b22569d6299acc300ac361c0e7bdfbf0234235e3e7e087", 0x8d, 0x1f, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000000980)="f86f30c79bab5c4cd1fd5ac5c48359fe98113dca01affcc25afcaed5c463ddab0a7ff950d77a4f07a3fb464533834d30977e0ee11deb2a95542de63e7876919f1b9632e3ddb30f803752bea6f56a65d301caf9d1b4b5e276f9b4c25cfe3a03ad2debd30528d5b8e9db6e9bfc24955276b1bc0a5a4356666ef47c22b94a3a7b2b0485f1378fea6075616d928c7068f753947f48fc66eb37bb934bdf4f3a7714f1ae8c7dff9f28710bb0daa270503bb8917cbb11548c09b3d74d3dcc72613f12f47545bafba6c7fc71fff12532a744c03ffd0ea9cef5c3fa600485ad72b23f5590871603d23508553c06d39b0a475b4f", 0xef, 0x7}]) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_getoverrun(r3) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:34 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x5]}, 0x3}, 0x1c) 14:32:34 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x11]}, 0x3}, 0x1c) 14:32:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:34 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x5502, 0x0, 0x0, 0x0) 14:32:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x8847, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 385.098068][T23841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.107481][ T36] audit: type=1800 audit(1618324355.022:812): pid=23839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15074 res=0 errno=0 14:32:35 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x4610, 0x0, 0x0, 0x0) 14:32:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x44]}, 0x3}, 0x1c) [ 385.193644][ T36] audit: type=1800 audit(1618324355.112:813): pid=23839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15074 res=0 errno=0 14:32:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x500}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x8848, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 385.326860][T23868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.336270][ T36] audit: type=1800 audit(1618324355.242:814): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15074 res=0 errno=0 14:32:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x58]}, 0x3}, 0x1c) 14:32:35 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x8fff, 0x0, 0x0, 0x0) [ 385.398259][ T36] audit: type=1800 audit(1618324355.312:815): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15074 res=0 errno=0 14:32:35 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x6, 0x200}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00006228a6e211ef34915eceb2000000000000221e12000c00010000007468"], 0x48}}, 0x0) r5 = syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f0000001600)=[{&(0x7f0000000200)="1d1472f10df693eefef1b1a4c4fcf793e4ca852f7bbf2a80c4fc632bef5ed3e9d0acf77142610257c7cad5f57e25cfc61664083ec4fc1f55d197cd2deabad84073d5e0e27245aec43196382ce4623f01097e8ad50a93a6087b657f62c7fede466a6d34d3b3b3b783131032655b84a3a7", 0x70, 0x8}, {&(0x7f0000000340)="67ce8f8b6e6654eb0506004dd93d7be9e48b12add1c05e62e28d4938bb5f8a3d8880d90a01b90dfab0fb1216703ba297737891544a9f545ed4da87cd7c302cae11e7467d41d0a82a2d00069b281501ba4d9da977d55284616c32c5aee58799f8f09f2a8f1a1d109cadba58b9669b3b886bb45c48558ad58ac001569d4d3036d7fca14e04a3009088c05d3e6d8860a5e3a6793ff2e1016d517a7fd56ed01b587ee5a25e5c48610356eaedd5346f270ace8a10cadefd05ff2e62967f3c02c2c0bb5bf845880f622250ccc924f07428", 0xce}, {&(0x7f0000000500)="e61afe6907eb91d4d583401ea9bc141053f3878ca86641b94d9b905050c6cdea8972f4b77e12da8158b4e0700f691400c3093267748ca609a9630cfb7519e41e32ac50af30f0692a366e31ec43a5349918e73170b9ea4762c01fb0f4f689e36a07862dca83842afb2ddca19cf955d95e57888325016fdea662056dde24f2caea6409e044472549665ce32f10de944fb9ea101683ec70ae12703cea3c019b5169ad2722ac1856a727db00fe8cb786afbb4c3b8bd82d0d128d82a6811ad663040eebd18aaaa4a08c820a84f057af77790d5021fbd84e3013ab00bf36e4747eb32f4e91af3981f2cb1d4538555762433571e5207475", 0xf4, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x4}, {&(0x7f0000000440)="b4186d86f1e97fbe697fe28bc81fb435b672effb1b455db743bd0d36b698fd1ef67044757b7b5f3dd96dfb8c6f8c830d9f617f22dd7dd70a7c5d877bfe9ed6e0a5a1a370480323b2074fad131db75cf4e838a05493ae7a442133267c7dffc1a9f464853abcc4f3d1", 0x68, 0x8}], 0x1, &(0x7f0000001680)={[{@nodiscard='nodiscard'}, {@snapshot={'snapshot', 0x3d, 0x1}}, {@order_relaxed='order=relaxed'}, {@order_relaxed='order=relaxed'}, {@nobarrier='nobarrier'}, {@discard='discard'}, {@nodiscard='nodiscard'}], [{@dont_hash='dont_hash'}, {@dont_measure='dont_measure'}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001740)={&(0x7f0000000280)='ext4_discard_blocks\x00'}, 0x10) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00m6x']) 14:32:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x600}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x34000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x60]}, 0x3}, 0x1c) 14:32:35 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x402, 0x0, 0x0, 0x0) 14:32:35 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xaa01, 0x0, 0x0, 0x0) 14:32:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xfc]}, 0x3}, 0x1c) [ 385.982939][T23909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x700}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x400300, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xff]}, 0x3}, 0x1c) [ 386.174625][T23940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:36 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xfc]}, 0x3}, 0x1c) 14:32:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) [ 386.361796][T23913] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.461591][T23913] loop0: detected capacity change from 0 to 8 [ 386.482906][T23913] NILFS (loop0): couldn't find nilfs on the device 14:32:36 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x4, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x900}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:36 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x255, 0x0, 0x0, 0x0) 14:32:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x2]}, 0x3}, 0x1c) 14:32:36 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xff8f, 0x0, 0x0, 0x0) [ 386.842404][T23938] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 14:32:36 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x16, 0x2, @thr={&(0x7f0000000200)="a239635b640d7799779793bcd5a39f6bb69e97e0a9f6ef3ff60631f7208e14b7326339f4e9048339e63a884c4eb82ab27aab3c6af8d2f787e6ca3a5016aae33050555f183f28acf96eb158e324f56827471715e2871562b8188848139a48fd9f944ee8f0311d62714282ab70037f67949d614f7666bf457f897d6a8b3b2182c4dc793bd446f8005ae5f22b0c6f74869fedb499bfb77f53a633d449361e7fab6933581362da550055b19b15bf7eaee1b6a831b20000000000000000", &(0x7f00000000c0)="8f1ce16dee8b4d01dec5e44e5ebe2e4614c8dd982f2322"}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) timer_create(0x6, &(0x7f0000000140)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000340)="002c9522525d868a2830970dd394d2d88546f3ce17f0294479f7ee12d3fe62a2133c2b178cf409a442fdbbd474dcab2cffffbe023b1677870cb64433bc8fb81eabae14bd7c931c36e64a5521d1a77d6c8897945de26985dd1f0df998b28162c41bfb461e9b34a20ba56d45e297a89fd7415c78fcf276addb6b20a8239f8555de99a48283f1fed396147ec9e0ea4d331b2b83d57239e1657b46d37ce6f50f68b9e68ee7fd1de57fb7afa34796927e63b5ce2ce48594fc6c8af9349c6d236bcf2c80ebc6004068e9296a75740eec028a6773792d82d25a83b22c0868c1d1ee51b9bb35c705c0f0fad6", &(0x7f0000000040)="d0ea25ece15e47db91642655"}}, &(0x7f0000000440)=0x0) timer_settime(r2, 0x1, &(0x7f0000000480)={{}, {0x77359400}}, 0x0) [ 386.914344][T23990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x3]}, 0x3}, 0x1c) 14:32:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xa00}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:37 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r2, r3+10000000}, {r4, r5+10000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000002000)) fcntl$lock(r6, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 387.141512][T24021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 387.152541][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 387.152551][ T36] audit: type=1800 audit(1618324357.072:822): pid=24018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15201 res=0 errno=0 14:32:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000006111180000000000950000000000000031f4fb409cd714304b734964b695b9a619505d33d20d3a119eb7e28e5127e511dfda8499e0805a27384ea9ea5d902a3a972b61079164885cfc2abcfc25b5ff851236b70d859e3a6f6b2db91d45232d76978062dff2041499d0ba744cf5d761d6a0ba099fab30b13f1ce6166d4c8a63c77919e9de681605c324247ba7db59e13ca65531dfff674b1766f9d0baa7dbaefa898fdd6aca0433d00be07e690449dc0447c67297e33f3688e8212274b9f7db1d9c1706d3e96bed298c2279fc1a941a96f106d4bf"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:32:37 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4]}, 0x3}, 0x1c) [ 387.244391][ T36] audit: type=1800 audit(1618324357.142:823): pid=24018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15201 res=0 errno=0 14:32:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x3000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:37 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xc00}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x15a, &(0x7f0000000400)="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"}}], 0x1c) tkill(r0, 0x9) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x1000, &(0x7f0000000140)="57e139cffb14fc53f2a717a8be0861f8251069e24acb5770af3bfb29c7cc2bbec0d88f507169feb9b4d0c63ab29046c318b68cdac19742230d58bc0c5f326a3d863c9e7d1343fd57ede8e92604b07aee37d76671c27b658dc3c118db47661a933ac3fd588bcbba58caea2a626d109ef09c5ce9a5973fba8c4c38e0bdc07b4ebe4bec4246ac03b7a2bf9363c8248f7e898ae2936bc6a7ebb129") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x46, @tick=0x5, 0xce, {0x1f, 0x9}, 0x20, 0x2, 0x2}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 14:32:37 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x300000, 0x0, 0x0, 0x0) 14:32:37 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xff8f, 0x0, 0x0, 0x0) [ 387.364958][ T36] audit: type=1800 audit(1618324357.282:824): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15201 res=0 errno=0 [ 387.369253][T24043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:37 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x5]}, 0x3}, 0x1c) 14:32:37 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x6]}, 0x3}, 0x1c) [ 387.488053][ T36] audit: type=1800 audit(1618324357.402:825): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15201 res=0 errno=0 14:32:37 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xf00}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 387.637836][ T36] audit: type=1800 audit(1618324357.552:826): pid=24077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15217 res=0 errno=0 [ 387.639100][T24079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 387.730539][ T36] audit: type=1800 audit(1618324357.652:827): pid=24077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15217 res=0 errno=0 14:32:40 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x3a, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{r0, r1+10000000}}, &(0x7f0000000340)) timer_gettime(0x0, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x3b, 0x4}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$setsig(r3, 0xa, 0x37) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) timer_settime(r5, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000200)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x7]}, 0x3}, 0x1c) 14:32:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x5000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x4788}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:40 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:40 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x800000, 0x0, 0x0, 0x0) [ 390.178338][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.210985][ T36] audit: type=1800 audit(1618324360.132:828): pid=24108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15539 res=0 errno=0 14:32:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x8]}, 0x3}, 0x1c) 14:32:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x4888}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x6000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 390.315947][ T36] audit: type=1800 audit(1618324360.162:829): pid=24108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15539 res=0 errno=0 [ 390.390396][T24130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.416468][ T36] audit: type=1800 audit(1618324360.332:830): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15539 res=0 errno=0 14:32:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x9]}, 0x3}, 0x1c) 14:32:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x5865}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x7000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 390.554791][ T36] audit: type=1800 audit(1618324360.402:831): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15539 res=0 errno=0 [ 390.659656][T24157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:43 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {r2, r3+10000000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000e6071898007400000000000021000000d08bdf653c4093786c97da8e4c0a26888a9ed139a12a37ad4a7aa13d00"/62, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000340)=[{r4}, {0xffffffffffffffff, 0x4089}, {0xffffffffffffffff, 0xdcc9d872dafe2c3f}, {0xffffffffffffffff, 0x108}, {r7, 0x8}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x62f5]}, 0x8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0xa]}, 0x3}, 0x1c) 14:32:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6000}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:43 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:43 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x1000000, 0x0, 0x0, 0x0) 14:32:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0xe]}, 0x3}, 0x1c) [ 393.259241][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 393.259253][ T36] audit: type=1800 audit(1618324363.172:834): pid=24178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15555 res=0 errno=0 [ 393.293177][T24184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6558}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x9000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 393.394754][ T36] audit: type=1800 audit(1618324363.212:835): pid=24178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15555 res=0 errno=0 14:32:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0xf]}, 0x3}, 0x1c) [ 393.484055][T24205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.497767][ T36] audit: type=1800 audit(1618324363.392:836): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15555 res=0 errno=0 14:32:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8100}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xa000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 393.591272][ T36] audit: type=1800 audit(1618324363.402:837): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15555 res=0 errno=0 [ 393.712216][ T36] audit: type=1800 audit(1618324363.612:838): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15552 res=0 errno=0 [ 393.751934][T24225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.771645][ T36] audit: type=1800 audit(1618324363.622:839): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15552 res=0 errno=0 14:32:46 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000bb9c35129ead10000507000d00"/26, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002800310f00"/20, @ANYRES32=r4, @ANYBLOB="000000000000ff"], 0x54}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140e, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x6044080) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x10]}, 0x3}, 0x1c) 14:32:46 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8847}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:46 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x2000000, 0x0, 0x0, 0x0) 14:32:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xb000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 396.288024][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 396.301077][ T36] audit: type=1800 audit(1618324366.223:840): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15573 res=0 errno=0 14:32:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x11]}, 0x3}, 0x1c) [ 396.385543][ T36] audit: type=1800 audit(1618324366.303:841): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15573 res=0 errno=0 14:32:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xc000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8848}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x44]}, 0x3}, 0x1c) [ 396.542024][T24275] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 396.596706][ T36] audit: type=1800 audit(1618324366.513:842): pid=24278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15573 res=0 errno=0 14:32:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xf000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 396.686583][ T36] audit: type=1800 audit(1618324366.553:843): pid=24278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15573 res=0 errno=0 [ 396.754851][T24252] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 396.777222][T24294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:47 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x31, 0x1}, &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:47 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x58]}, 0x3}, 0x1c) 14:32:47 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x2040000, 0x0, 0x0, 0x0) 14:32:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x10000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 397.124614][T24318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x60]}, 0x3}, 0x1c) 14:32:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x11000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:47 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)=0x9, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 397.312504][T24345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0xfc]}, 0x3}, 0x1c) 14:32:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x20000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 397.523625][T24370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:47 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0xff]}, 0x3}, 0x1c) 14:32:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x60000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:47 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x6040000, 0x0, 0x0, 0x0) 14:32:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:32:47 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:48 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={&(0x7f0000000200)="8d1e112ab4743832e6f057f4f1e693217941239f4bd8fbb4751dc87257fc1070876fbd59316f12d7316598f3baa7b33039c85d6bb29bdac343e2b86f500102cc5d8fa3f725a9b18e29e38be1c4476f969a4a62eaf3208597a8d0a6037dd879c405167f4ed24418850eb9d22374717de6e3f765fc9a6183c755f83a2ed0dd2f9a9435f9613517c10d8978350d85df49e8013b65dfadd39a995ca86da6ed31777606accb2dfd60811aa4313cfd", &(0x7f0000000500)="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"}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x2, 0x2, 0x2, 0x3, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000000c0)) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:32:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x65580000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:48 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:48 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x8000000, 0x0, 0x0, 0x0) [ 398.304765][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 398.304776][ T36] audit: type=1800 audit(1618324368.223:856): pid=24429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15605 res=0 errno=0 [ 398.339961][T24433] __nla_validate_parse: 1 callbacks suppressed 14:32:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:32:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 398.339980][T24433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.363868][ T36] audit: type=1800 audit(1618324368.263:857): pid=24429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15605 res=0 errno=0 14:32:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x81000000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 398.473336][ T36] audit: type=1800 audit(1618324368.393:858): pid=24454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15603 res=0 errno=0 14:32:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:48 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x4]}, 0x3}, 0x1c) [ 398.546521][T24461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.585103][ T36] audit: type=1800 audit(1618324368.423:859): pid=24454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15603 res=0 errno=0 [ 398.677726][ T36] audit: type=1800 audit(1618324368.593:860): pid=24473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15600 res=0 errno=0 [ 398.765042][ T36] audit: type=1800 audit(1618324368.593:861): pid=24473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15600 res=0 errno=0 14:32:49 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) 14:32:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x81ffffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:49 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000680)={{r2, r3+10000000}, {0x0, 0x3938700}}, &(0x7f00000006c0)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x6, &(0x7f0000000040)={0x0, 0x33, 0x2, @tid=r5}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000440)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) timer_create(0x7, &(0x7f00000005c0)={0x0, 0x6, 0x0, @thr={&(0x7f0000000480)="bd8825ecc2c6", &(0x7f0000000500)="410bc21c4f686214d9eea6cdea9b8b2990168f56287fe33d0757d0f2542184b554eb28f6dcbb2e1a73059e19b0a6ef7bad346097c7d70cb1713c976f3e4b2f5d14a38780405576ca08f9673b428dedf8e91e15fb47e4eb2105f9f031d398b0d795ebf1a4ed679b504a1878f73c87d786e5c824993c010a3780d82b32836b626bba739bbe"}}, &(0x7f0000000600)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:32:49 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xd000000, 0x0, 0x0, 0x0) [ 399.254508][ T36] audit: type=1800 audit(1618324369.173:862): pid=24497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15622 res=0 errno=0 [ 399.284132][T24502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:49 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) [ 399.320217][ T36] audit: type=1800 audit(1618324369.183:863): pid=24497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15622 res=0 errno=0 14:32:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:32:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x88470000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 399.477226][ T36] audit: type=1800 audit(1618324369.393:864): pid=24523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15621 res=0 errno=0 14:32:49 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc}) 14:32:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 399.518857][T24530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:32:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x88480000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 399.581542][ T36] audit: type=1800 audit(1618324369.433:865): pid=24523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15621 res=0 errno=0 [ 399.694380][T24548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:52 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc}) 14:32:52 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x9, 0x5, 0x0, 0x9}, {0xea, 0xfb, 0x6, 0x6}]}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x208202, 0x90) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/exe\x00', 0x0, 0x0) 14:32:52 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:32:52 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:52 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x10000000, 0x0, 0x0, 0x0) 14:32:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:52 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc}) [ 402.300353][T24572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:52 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:32:52 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x60}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x8b1cd4c0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:52 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:32:52 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 402.532349][T24605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:52 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x300}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:53 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:53 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x500}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:53 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:32:53 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xe]}, 0x3}, 0x1c) 14:32:53 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x20000000, 0x0, 0x0, 0x0) [ 403.238335][T24638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xc0d41c8b, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:53 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x600}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:53 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:32:53 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r1, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 403.401105][T24664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 403.441187][ T36] kauditd_printk_skb: 10 callbacks suppressed 14:32:53 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r0, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 403.441196][ T36] audit: type=1800 audit(1618324373.363:876): pid=24665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15656 res=0 errno=0 14:32:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xefffffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 403.543864][ T36] audit: type=1800 audit(1618324373.403:877): pid=24665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15656 res=0 errno=0 14:32:53 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x700}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 403.615980][T24687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:53 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:32:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 403.764744][ T36] audit: type=1800 audit(1618324373.683:878): pid=24697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15656 res=0 errno=0 14:32:53 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x900}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:53 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x4, &(0x7f0000000400)={0x0, 0x800001a, 0x2}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1, 0x2, 0xf14, 0x400}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x18, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000140)) fcntl$lock(r1, 0x4, &(0x7f0000000180)={0x1, 0xab7fcb28dbeeb15, 0x2}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$CHAR_RAW_ZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000200)={0x6f, 0x6}) timer_create(0x5, &(0x7f0000000240)={0x0, 0x25, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x77359400}}, &(0x7f00000003c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 403.815549][T24702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 403.837881][ T36] audit: type=1800 audit(1618324373.683:879): pid=24697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15656 res=0 errno=0 14:32:53 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x40000000, 0x0, 0x0, 0x0) 14:32:53 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:32:53 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x2, 0x0, 0x6, 0xfffffffffffff04f, r1}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00', r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40890}, 0x0) 14:32:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:53 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xa00}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 403.964446][ T36] audit: type=1800 audit(1618324373.853:880): pid=24713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15646 res=0 errno=0 14:32:53 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r0, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 404.069286][ T36] audit: type=1800 audit(1618324373.863:881): pid=24713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15646 res=0 errno=0 [ 404.094967][T24727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:54 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:32:54 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc00}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 404.172853][ T36] audit: type=1800 audit(1618324374.043:882): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15651 res=0 errno=0 14:32:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 404.282372][ T36] audit: type=1800 audit(1618324374.093:883): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15651 res=0 errno=0 14:32:54 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xf00}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:54 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x58]}, 0x3}, 0x1c) [ 404.388070][T24759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.393494][ T36] audit: type=1800 audit(1618324374.233:884): pid=24755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15657 res=0 errno=0 14:32:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 404.512802][ T36] audit: type=1800 audit(1618324374.233:885): pid=24755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15657 res=0 errno=0 14:32:54 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x42000000, 0x0, 0x0, 0x0) 14:32:54 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x4788}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 404.632584][T24778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:55 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000340)=""/188, 0xbc}], 0x2, 0x4, 0x1) 14:32:55 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:32:55 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000400)=""/200, 0xc8, 0x20, &(0x7f0000000100)={0x11, 0x1b, r0, 0x1, 0x10, 0x6, @random="3065908ef455"}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:32:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x4888}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:55 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x46100000, 0x0, 0x0, 0x0) 14:32:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x5865}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 405.182648][T24816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:55 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:32:55 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000000c0)) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x6000}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 405.431996][T24844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:55 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:32:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x6558}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 405.567931][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:55 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:32:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:55 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:32:55 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x55020000, 0x0, 0x0, 0x0) 14:32:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x8100}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:55 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) r2 = syz_mount_image$erofs(&(0x7f0000001140)='erofs\x00', &(0x7f0000001180)='./file0\x00', 0x81, 0x2, &(0x7f0000001240)=[{&(0x7f00000011c0)="da512f46b6b7186b2d6ff36f87dc2934d839f7c9f1953f5010764a9d3a", 0x1d, 0x9}, {&(0x7f0000001200)="aba6dd653304b29efb13e397e8d4e4024a4c45ec09603a980e742c591f95c1febc6af5feca83c5285f0159a0afe97186db941d4e883627f5", 0x38, 0x300a}], 0x400, &(0x7f0000001280)={[{@noacl='noacl'}], [{@obj_user={'obj_user'}}, {@obj_user={'obj_user'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_gt={'uid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) r3 = syz_mount_image$ocfs2(&(0x7f0000001380)='ocfs2\x00', &(0x7f00000013c0)='./file0\x00', 0x100000001, 0x1, &(0x7f0000001500)=[{&(0x7f0000001400)="af53028533475d15af3d7dbc4a4a1901abbd469cdee81acd1652055f5ef8b9ee342d8bcb698ab48c60aa8c9a45f51c8d1a7b65deb19b8c146a194824dde6ff6d1dbe524753765698c212aa2ec9fd83650a5f3b43fe8acda799ba63a4a6d7ef909806516cf1f3af55e98fe62257a9f1f6355ee46be43f1254f1355ec943dcd88a1de141c50395d26b9965ae0384926d887111a37e0dd9286017adc6ee4411a5eddb40b76a6f991f8199911ca26b0615059304c543e8de900f15da4de0a1f107d2eb884d6f0145d0fb265b09e3cb", 0xcd}], 0x420, &(0x7f0000001540)={[{'\\]/\x9f.\'-\x00'}, {')]/^\'-'}, {'&)!-.'}, {}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r5, r4) io_submit(0x0, 0x8, &(0x7f0000001680)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x438, 0xffffffffffffffff, &(0x7f00000000c0)="7586a1b20cc623b51502d0f0dd51eac7a18e4db3a808bb9f2ce51eba6879a373943152e2e0715b4c", 0x28, 0x20, 0x0, 0x3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffffffff, &(0x7f0000000ac0)="7bab682a067b340c36c87e429addc54c2f2a2ea68d92e46cc0c9d76a18ed16139578394408d01abd7f511bcb9cb8922a6d40222b936e122a10e0ad34010cdb389227c862e9cc92d6bf5156b72236b0cfc6589dc92749f7bf5a4be59a642a8fb089997854968d0f677614479fad3983caaa5afabe02706cd096ef75821d21b94ca9d025d58e07db465954698cdacf651381d316fd2a3acb50404ab1681e0eab6dadfd8115cde5e45002d3f63daa062c50446a04675b2b38d3cc0d006e61935c33bd656207bef81033d73dc3b386fe0b3f004bdc25c64e3c0540669e9464debfff41258b51b69d37d486458558047b27613cebaf08c42f", 0xf6, 0x3f, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x3, 0x40, 0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x1000, 0x0, 0x2}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000c80)="c137060d9d04875b4adcfe905d57421db033dc4cf617732f7f8a0f2e0727735aef25ca9ec2cc1bf38c28bd86eeb37052c7d2946d3118c54f7d3a2a17968b3bb8d8c03d2bf02d8a818d85f65483a12967be015b5a42fa6643ec67c597f9977f67eb9ea36493c1", 0x66, 0x8, 0x0, 0x1}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000001040)="0337f28540b360ecdcd1696650", 0xd, 0x80000001, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f00000010c0)="1a0ba2b2402291fd2260ad4fb5", 0xd, 0x3, 0x0, 0x6}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0xffff, r2, &(0x7f0000001300)="072f446deee8f2541a373a11327108a1ad54684b50dbf3b9d6ebad423fdb8f73eb497ebd", 0x24, 0x2, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001580)="20039ea492329767af0c4f90feec7bafed379122c53a3093cfa87dce889a35870890f2bd1e128d7af5749383f6b2c37c1180ab07ecca12c39b68007b9b77d4b5dceff036d82a69190ace71c1b27b94e7b8a8518c4b4ab81b1585514fd2aabf4bf155aa5ceda5217b14805c4805fa1051c8a12dcaaaa4912fa098c4e37dfebbaeddb2f28aba858ee572942176d9f28edfb27d523008567e9367efb0f21e65ce9dd4b71438afa5d7d8094b97", 0xab, 0x4, 0x0, 0x0, r5}]) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 405.753611][T24877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:32:55 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:32:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x8847}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 405.962208][T24908] loop0: detected capacity change from 0 to 48 14:32:55 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) [ 406.004419][T24908] erofs: Unknown parameter 'obj_user' 14:32:56 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x8848}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) [ 406.101758][T24924] loop0: detected capacity change from 0 to 264192 14:32:56 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:32:56 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x3, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:56 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) [ 406.216579][T24908] loop0: detected capacity change from 0 to 264192 14:32:56 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xaa010000, 0x0, 0x0, 0x0) 14:32:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x2, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:57 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:32:57 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x4, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x3, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:57 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x10, 0xffff, 0x4, {{0x1f, 0x4, 0x0, 0x2e, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x9, [0x0, 0x80000000, 0x8000, 0x7, 0x8001]}, @ssrr={0x89, 0x7, 0xf8, [@loopback]}, @ssrr={0x89, 0xb, 0xd3, [@local, @empty]}, @end, @lsrr={0x83, 0x23, 0x4e, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x18, 0xc6, 0x0, 0x6, [0x4, 0x5, 0x1ff, 0x4, 0x5]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:32:57 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x16, 0x1}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)={0x0, 0x0, 0xfffffffffffffffd}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x4}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000068b61c049ea2a60c3a59008db9010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002800310f00"/20, @ANYRES32=r5, @ANYBLOB="000000000000ff"], 0x54}}, 0x0) fchown(r4, 0xffffffffffffffff, 0x0) 14:32:57 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0xff8f0000, 0x0, 0x0, 0x0) 14:32:57 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x5, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:57 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{r3, r4+60000000}}, &(0x7f0000000140)) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:32:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x4, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:57 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:32:57 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:32:57 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x2, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x5, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x6, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:32:57 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:32:57 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:32:57 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x3, 'atm\x00'}]}, 0x2c}}, 0x0) 14:32:57 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2, 0x0, 0x0) 14:32:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x7, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:00 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:00 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x8, 'atm\x00'}]}, 0x2c}}, 0x0) 14:33:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x8, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:00 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:00 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x8, 0x0, 0x0) 14:33:00 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x7e218de4}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="503f1b706c2595686478575319480000001000050700"/33, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000d5fc3431b149d09fa6a8f9825805", @ANYRES32=r6, @ANYBLOB="0012000c00010076657468000000000000000000"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000500)={{r4}, "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"}) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 410.572890][T25093] __nla_validate_parse: 13 callbacks suppressed [ 410.572902][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 410.596052][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 410.596062][ T36] audit: type=1800 audit(1618324380.513:914): pid=25094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14130 res=0 errno=0 [ 410.612760][T25100] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 14:33:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x9, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:00 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0xf, 'atm\x00'}]}, 0x2c}}, 0x0) [ 410.674630][ T36] audit: type=1800 audit(1618324380.553:915): pid=25094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14130 res=0 errno=0 14:33:00 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) [ 410.777873][T25118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 410.795912][ T36] audit: type=1800 audit(1618324380.713:916): pid=25119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14082 res=0 errno=0 14:33:00 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) [ 410.881933][ T36] audit: type=1800 audit(1618324380.803:917): pid=25119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14082 res=0 errno=0 14:33:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0xa, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:00 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x500, 'atm\x00'}]}, 0x2c}}, 0x0) 14:33:01 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 410.991365][T25139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 411.011112][ T36] audit: type=1800 audit(1618324380.933:918): pid=25141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14145 res=0 errno=0 14:33:01 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0xb, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:01 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x10}}, 0x0) 14:33:01 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xd, 0x0, 0x0) [ 411.115496][ T36] audit: type=1800 audit(1618324381.013:919): pid=25141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14145 res=0 errno=0 [ 411.201719][ T36] audit: type=1800 audit(1618324381.123:920): pid=25160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14145 res=0 errno=0 [ 411.204452][T25163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 411.291685][ T36] audit: type=1800 audit(1618324381.163:921): pid=25160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14145 res=0 errno=0 14:33:02 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x32, 0x0, @thr={&(0x7f0000000040)="5a4534b5cb5834ed7cb0f3ad308ed1f6ce1aaa7e49bed3daefea2e401e42183f0b66312f45b2b4071d80f1", &(0x7f0000000500)="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"}}, &(0x7f0000000140)) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:02 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x24}}, 0x0) 14:33:02 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0xc, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:02 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:02 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x10, 0x0, 0x0) [ 412.970903][ T36] audit: type=1800 audit(1618324382.893:922): pid=25190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14371 res=0 errno=0 [ 413.002022][T25194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0xc0}}, 0x0) 14:33:03 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) [ 413.081600][ T36] audit: type=1800 audit(1618324382.923:923): pid=25190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14371 res=0 errno=0 14:33:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0xf, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:03 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x30, 0x0, 0x0) 14:33:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0xec0}}, 0x0) 14:33:03 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xff00, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x21}, 0x48804) 14:33:03 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) [ 413.240560][T25223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:03 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x2}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup2(r2, r3) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x33fe0}}, 0x0) 14:33:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x10, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:03 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:03 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) 14:33:03 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x42, 0x0, 0x0) [ 413.462969][T25250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x11, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x200000ac}}, 0x0) 14:33:03 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) [ 413.592496][T25276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:03 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1aa, 0x0, 0x0) 14:33:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x7ffff000}}, 0x0) [ 413.771237][T25292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:04 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0xfffffdef}}, 0x0) 14:33:04 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:33:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:04 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x204, 0x0, 0x0) 14:33:04 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:04 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:04 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x2}, 0x0) 14:33:04 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x2, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:04 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:04 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x255, 0x0, 0x0) 14:33:04 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:33:04 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x3}, 0x0) 14:33:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x3, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:04 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:33:04 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x8}, 0x0) 14:33:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x4, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:05 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x4, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(r0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x7, &(0x7f0000000280)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000340)="93805e5867ce40b203315d5629a0163a3140207a32182948752541a86d3c3b5e0234e23ec7107ba1d6b37b35e1e520695e1be2f936b3e1c98d5c631828c640eb744ad5aa489cc17b3a68c537e25b9c5492388931363b458aa8033e42ebee590dfe41903f2ede4e59df11e10ce7031c3eb1e21df271990345994e5eb23ea9b73231c69ce8b046edd5522d1ea06764fb3fbabd94fecd6eb68ae770dd417a67271fccbf2ea2bf09b4b8c189c3c77b03bef782d7bd4fabf47fb012455e1bbaa73e137775cf5058d562db1e38cc", &(0x7f0000000240)="07f9aaca62ddd30471a8a7"}}, &(0x7f0000000440)) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000540)={0x8, 0x9, 0x8, 0x20004, 0x5, 0x94a, 0x7ff, 0x4}, &(0x7f0000000580)={0x100000002, 0x3, 0x9, 0x6, 0x9, 0x10000, 0x401, 0x80000000}, &(0x7f00000005c0)={0x3, 0x4, 0x8000000000008, 0x20, 0x200, 0xfffffffffffffffa, 0x4, 0xcea}, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000680)={&(0x7f0000000640)={[0x7]}, 0x8}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x58, &(0x7f0000000180)={0x0, 0x22}, 0x1, 0x0, 0x0, 0x1098}, 0x40000) 14:33:05 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:05 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x402, 0x0, 0x0) 14:33:05 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:33:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x5, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:05 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0xf}, 0x0) [ 415.841883][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 415.841894][ T36] audit: type=1800 audit(1618324385.763:942): pid=25417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15123 res=0 errno=0 [ 415.845557][T25419] __nla_validate_parse: 4 callbacks suppressed [ 415.845568][T25419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:05 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f0000002000)) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x2, 0xffffffffffffffff}) fcntl$lock(r7, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4008000) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) 14:33:05 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:05 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x406, 0x0, 0x0) 14:33:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x6, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 416.050557][ T36] audit: type=1800 audit(1618324385.973:943): pid=25417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15123 res=0 errno=0 14:33:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x500}, 0x0) 14:33:06 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) [ 416.149594][T25456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x2}, 0x0) [ 416.191656][ T36] audit: type=1800 audit(1618324386.113:944): pid=25457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15186 res=0 errno=0 14:33:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x7, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:06 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x604, 0x0, 0x0) [ 416.294811][ T36] audit: type=1800 audit(1618324386.113:945): pid=25457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15186 res=0 errno=0 14:33:06 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) [ 416.344494][T25478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 416.388179][ T36] audit: type=1800 audit(1618324386.243:946): pid=25476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15090 res=0 errno=0 14:33:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x3}, 0x0) [ 416.478381][ T36] audit: type=1800 audit(1618324386.243:947): pid=25476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15090 res=0 errno=0 [ 416.559810][ T36] audit: type=1800 audit(1618324386.463:948): pid=25497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15090 res=0 errno=0 [ 416.619588][ T36] audit: type=1800 audit(1618324386.513:949): pid=25497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15090 res=0 errno=0 14:33:08 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={&(0x7f0000001a80)="b76189a563ac30ca0fb7a6eee1ba963be36b1cc07b2290fcbcc90b2b9c62a2cc2f5291c2baab646850ed43d7f7b0818f121d128402fc2df2528c08df0e07052b1823b69be3be9ac2ff221af6b2d3e0b238b885dc81fa616ff3f317daf401b1c53e6b86ea3888a8e68c767855b2960f16f13e87f0f52f91a0c8a6b8067473e1b273e708b6637508e8e750cfb58a0004fd75af6ce6886d665b6875636c3a444308e862d34bae6e8287d54fda87", &(0x7f0000003040)="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"}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x30, 0x2, @thr={&(0x7f0000000500)="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", &(0x7f0000000200)="8ce057f5f614f0fe708acf31dc8a1b52c5d9df006f103507a9ff62565dbe821d296c5277edbec4cdc6d6d36ec5a95449ef8f3162e2a4af1383d46a9bee2e0a2e56b7e594309863a23a95779084adc22c6c660224d2e5d3be6bd876b6a861c1cf94239d5925afc9d9f39e407db3b0bedadb22ce2ac1818b51c1d5bd8d74a7ccf5fa9028280fca"}}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) clock_gettime(0x1, &(0x7f0000001980)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000015c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001600)=0x0) r5 = geteuid() clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000001a00)={{}, {r6, r7+10000000}}, &(0x7f0000001a40)) sendmmsg$unix(r2, &(0x7f0000001900)=[{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000003c0)="373eff7ac780cf48f17a974e47ef90d01ecc1297b024b717f3c68e3e901cb0340406f9609c9df218753e66ad05d180181090766a4d62da52166786f3c3257ff0e736f55d4d79b198b66455c14e1ff25fac0c3f30ac4e8c33b501a77a5c3725899dea8483a8564799878019f3bdb084c877446a06400eab44698448fe1fdafcbd924c1478594ef2b782a128b4d2c9ab56fefd10a2dc8089bc68aa74f4346b165b08fe23be4b603bc88c0ade780a041ccbbe18668255cfc3d5edaac7e31b725848b6458473c0ae77ffa8ebb5d1ab7a22c984943b796599bd16a4", 0xd9}, {&(0x7f0000001500)="5398a8f0b519a2850bc0dc1ba31a0497cdf62e5b497c9c77ad023cc2190d8fe533b49eeffdcd2160f1c9d6739dc54f97bcb02e710380b790b609e721d70aade227aa41ea8c9ce395bcea08f728cba69fa679a89eb83d5fba3c503fb1a798ab0cf24f5c101db4691b12f999aab0ff6b5777ce0bfb9a652ed47d41b063ce338c35bda4ee454795d1c1051ce5b34c0d1fe2cac782ff24796f8d0659740126075943ee323aea2dfe497ff152ae8eff0e59810f00657569ba5a67", 0xb8}], 0x2, &(0x7f0000001c80)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000d10f4279f941dec85dbcbc4f94b780d9eb2e4c90d90e5b630e018a44e43d8b9cc8ca11f83a53211bb9d7902c2a0a830a652d4f2239e6f761259dbaf8109d59e4909254f3d29b69e2cc07ddc750589336704911404b64d4df1e215311d64def23ee2e0499f69bb3a3e1150f0bb10af02c989d2dbda402d311986cfd5f4a2e19fb70bba936673ab439cb988ea1a493915131dd448c02933975ecd6e51e", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000800005b89b45b6cab568730f3091404b6e8dd642c001a0f39886016ed26563effac0b5d21f780756615d16f0a1c84452d"], 0x48, 0x4000810}, {&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)="ea2cfe8e91fe8411130831b0ffee8574920a069a71ae68a597179a2a984231e9ecf1e260f74bf71ef70d69b9a5fcb32c7c0ce82ccd3c4d71a1223091d4ec225ccfc7b64378e619afe05747e11fae6fa70afebe6994e20d620d31a872f874a95e17b96da7423a9adff5554d89a2dd6681d4254d740d115a2c81e6bd34d979da4bafff7afc86061ed90c2af971ea408cb55e156f4a4a7aa46997e1cca5c5f586021da68ff14cab5f18a8e10d4e7ef872e41bc851e651cb9ea1335584ebeaf025996ce76b2c6ffd333b06600ea375f1680ca7", 0xd1}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000001840)="18dd61b31d0b8deca1cee6209de7999279a869ac4ca36c32e7750f", 0x1b}], 0x3, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee00}}}], 0x20, 0x20000085}], 0x2, 0x20000800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x8, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x4}, 0x0) 14:33:08 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:08 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xd00, 0x0, 0x0) [ 419.057554][ T36] audit: type=1800 audit(1618324388.973:950): pid=25515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15711 res=0 errno=0 [ 419.082774][T25517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:09 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) [ 419.131473][ T36] audit: type=1800 audit(1618324389.053:951): pid=25515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15711 res=0 errno=0 14:33:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x9, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:09 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x5}, 0x0) 14:33:09 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1046, 0x0, 0x0) 14:33:09 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 419.261044][T25543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:09 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:09 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002800310f00"/20, @ANYRES32=r4, @ANYBLOB="000000000000ff"], 0x54}}, 0x0) connect$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x2}, 0x2}, 0x18) 14:33:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0xa, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:09 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x6}, 0x0) 14:33:09 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:09 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:09 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2000, 0x0, 0x0) 14:33:09 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x7}, 0x0) [ 420.015422][T25584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0xb, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:10 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) 14:33:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 420.118748][T25603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.166344][T25603] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:33:10 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x3000, 0x0, 0x0) 14:33:10 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8}, 0x0) [ 420.223736][T25617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:10 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0xc, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:10 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:10 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x9}, 0x0) 14:33:10 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4000, 0x0, 0x0) [ 420.860296][T25603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.869880][T25603] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.930284][T25652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 420.943465][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 420.943502][ T36] audit: type=1800 audit(1618324390.864:960): pid=25651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15707 res=0 errno=0 14:33:10 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) [ 421.020298][ T36] audit: type=1800 audit(1618324390.944:961): pid=25651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15707 res=0 errno=0 14:33:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xa}, 0x0) 14:33:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0xf, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 421.132047][T25675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:11 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) [ 421.196737][ T36] audit: type=1800 audit(1618324391.114:962): pid=25683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15709 res=0 errno=0 14:33:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xc}, 0x0) [ 421.256094][ T36] audit: type=1800 audit(1618324391.154:963): pid=25683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15709 res=0 errno=0 14:33:11 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4200, 0x0, 0x0) 14:33:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x10, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:11 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000000c0)={{r2, r3+10000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_pgetevents(r5, 0x40, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000280)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x8000]}, 0x8}) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:11 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:33:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xf}, 0x0) [ 421.361843][ T36] audit: type=1800 audit(1618324391.284:964): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15410 res=0 errno=0 14:33:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 421.446398][ T36] audit: type=1800 audit(1618324391.284:965): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15410 res=0 errno=0 14:33:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x10}, 0x0) [ 421.510948][T25715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 421.538562][ T36] audit: type=1800 audit(1618324391.414:966): pid=25712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13897 res=0 errno=0 14:33:11 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) 14:33:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x11, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 421.664461][ T36] audit: type=1800 audit(1618324391.424:967): pid=25712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13897 res=0 errno=0 14:33:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x60}, 0x0) 14:33:11 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) [ 421.753702][ T36] audit: type=1800 audit(1618324391.574:968): pid=25732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14913 res=0 errno=0 [ 421.790485][T25742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:11 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4610, 0x0, 0x0) 14:33:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 421.847876][ T36] audit: type=1800 audit(1618324391.584:969): pid=25732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14913 res=0 errno=0 14:33:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x60, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 421.991371][T25765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:33:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x300}, 0x0) 14:33:14 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x2}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x4}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:14 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x5502, 0x0, 0x0) [ 424.462516][T25788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x2, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x500}, 0x0) 14:33:14 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:14 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x8fff, 0x0, 0x0) 14:33:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 424.614888][T25811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x600}, 0x0) 14:33:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x3, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x700}, 0x0) 14:33:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) [ 424.770277][T25838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:33:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x900}, 0x0) 14:33:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:14 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xaa01, 0x0, 0x0) 14:33:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:14 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000540)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000580)) timer_settime(r1, 0x0, &(0x7f00000005c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000680)) io_cancel(0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0xc, 0x1, @thr={&(0x7f00000000c0)="9af00079a30acf2338d3652c273f4340756f5ffa74032f474dc6165104031d6963f94c15ab06b2a398d1303392bd7e3ee8365cbccfd8f52e", &(0x7f0000000200)="e96669b8ad3c76d1e6b0949e0f4cfa4913e5259362874176b4c103de44ca4507838b572618890407504926abb45211e3d655cf2459dff66193d44e8f98e5aea6b078594a606a92907f2c9cee50e1ea57cad776746e3a95d63cb1ee7676b72e327b1660e45d5034e3f7dddfa73d90b7658c8ae28ea995891ee20671a69673edaf1aed6a"}}, &(0x7f0000000340)=0x0) timer_settime(r7, 0x0, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, &(0x7f00000003c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:14 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:33:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x5, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xa00}, 0x0) 14:33:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:15 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x6, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:15 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xff8f, 0x0, 0x0) 14:33:15 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xc00}, 0x0) 14:33:15 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000480)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f0000000500)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000002000)) fcntl$lock(r6, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x200000}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000580)) timer_create(0x3, &(0x7f0000000040)={0x0, 0x12, 0x4, @thr={&(0x7f0000000200)="bedab212c85234b03d3e00dfe3c5374b5823bb7c83034ea97712a9216be3dd58e6aa136b289cdecaf157cf905102aeea6cb87cd6cf224b626a954487dcef7aa8e3ef9791093a0d92d176213cd5817942ea88f60d90509b7e1675fdd4480b675d40d6b96256b017737f0bc794b902e4f2c908f32841fdd6fcd2875606e1addd51bd6e372c07e0dcb5b93f251f30a74e16f9ebaf6e8abdc51b9052606b2af9", &(0x7f0000000340)="67fd9674813f2db450468b3049d8d88aca75b1a37933624500cddec5701f6a4aa8e5361488eb63bab2694bb986a02dd53c5fe02ce0b52b441a6b484a69c3efda067575c701f344d6e783fad8dc4701688f71cbf8c9c148d3bae2a2264953c31596d23e7e02aa8fd081a0de60417086cb9554c74075b546816639301169485cf9924bbf975dae4f53c85cf129dc310c1b312d0b0e56c7e214cd386284eac909447d2542ebae152533dbabeb75319b6f356255628343c38a8fd2161c2e1a5611a63ff37056327765028c2d8fa0bd1bbca187a57649c00e9af480c3e494febe24155576aae112"}}, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 14:33:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x7, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:15 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xf00}, 0x0) 14:33:15 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:15 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x4788}, 0x0) 14:33:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x8, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:15 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x300000, 0x0, 0x0) 14:33:15 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:33:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x9, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:15 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x4888}, 0x0) 14:33:16 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0x80000000, 0x1, 0x4, 0xe000, 0xf3d2, {0x77359400}, {0x5, 0xc, 0x8, 0xf7, 0x6, 0x0, "b6369d48"}, 0xde3, 0x6, @userptr=0x1, 0x7f}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:33:16 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:16 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x800000, 0x0, 0x0) 14:33:16 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x5865}, 0x0) 14:33:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xa, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 426.235296][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 426.235308][ T36] audit: type=1800 audit(1618324396.154:992): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14548 res=0 errno=0 [ 426.264243][T26004] __nla_validate_parse: 6 callbacks suppressed [ 426.264256][T26004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:16 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:33:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 426.342505][T26010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.358567][ T36] audit: type=1800 audit(1618324396.264:993): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14548 res=0 errno=0 14:33:16 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x6000}, 0x0) 14:33:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xb, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:16 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000, 0x0, 0x0) 14:33:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 426.488785][T26040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 426.517423][ T36] audit: type=1800 audit(1618324396.434:994): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14307 res=0 errno=0 [ 426.559311][T26049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 426.581946][ T36] audit: type=1800 audit(1618324396.504:995): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14307 res=0 errno=0 14:33:17 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x6558}, 0x0) 14:33:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xf, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:17 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2000000, 0x0, 0x0) [ 427.059915][T26019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.107814][T26075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 427.157512][ T36] audit: type=1800 audit(1618324397.074:996): pid=26078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14836 res=0 errno=0 14:33:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x10, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8100}, 0x0) [ 427.199962][ T36] audit: type=1800 audit(1618324397.114:997): pid=26078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14836 res=0 errno=0 14:33:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) [ 427.309734][T26102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 427.324364][ T36] audit: type=1800 audit(1618324397.244:998): pid=26103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14643 res=0 errno=0 14:33:17 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2040000, 0x0, 0x0) [ 427.392398][ T36] audit: type=1800 audit(1618324397.304:999): pid=26103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14643 res=0 errno=0 14:33:17 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8847}, 0x0) 14:33:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x11, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:17 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x6040000, 0x0, 0x0) [ 428.028788][T26137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x60, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 428.073083][ T36] audit: type=1800 audit(1618324397.994:1000): pid=26147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14850 res=0 errno=0 14:33:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8848}, 0x0) [ 428.136205][ T36] audit: type=1800 audit(1618324398.024:1001): pid=26147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14850 res=0 errno=0 [ 428.164355][T26159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x300, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:33:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 428.310646][T26181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:18 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000200)="e886778c0d5272c0811ca8b30e0690becebacd79f697cee62dd7930881758e9487a6d2b3c8380c4c07ec30fe6d1ca52dd69cf8d014fd57be6a997e0dbd662f099deb50c92343f5465b9ecf81c9adc0c6751efffc6bdc1673ff61cccd0689b73ad7", &(0x7f0000000040)="ac7d06a2844a8b012e7dd30a06d78a80aa8b"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000340)={{r3, r4+10000000}, {0x0, 0x989680}}, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x34000}, 0x0) 14:33:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x500, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:33:18 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x8000000, 0x0, 0x0) 14:33:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x400300}, 0x0) 14:33:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x600, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:18 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x1000000}, 0x0) 14:33:19 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000200)) timer_create(0x2, &(0x7f0000000040)={0x0, 0x16, 0x2, @thr={&(0x7f0000000340)="a58cfa74d3702b075af451814fa06a01dc993812db62c449eb21613ec77574785a0d135012327e32707f8ac40f7f194bbd333900acc6da0e7faafeee3182fd2958b1ec90012fa387ab128a2cc1550282c1b40988f1c8787bf2918c706963695cbb80c92f4de35be4d09c3ab6c18f64bf9631ea402da82baa44c0700122b5c007eee6423c0905061dd62e75eaa930d761a06fcc1b1224343eae0ddb340c5690ce81742b7735f4cbe2f0cd00cd08e6925cb331d1e0a5a50b1b54e5e984ec1345bdbbf108012677875d1c7e566bf2fb89fbda8abc503095b8a322e68c64c0391182f6b12915f827c229f5f982", &(0x7f0000000500)="2343de354419b464fcccba55029bfbb631cb8338291873ab03769f8262715694cf1d78884eb68613cb9f667a34f7e10559aec11995948e96765d623ffde3189220572a3fe81158b90cd6cc18f9cebe3c00690cba57cd97be44bbc08b941e0d4b5c9b4e6dceac63182fdf202bef2c19290ae36295d8c70de23144d4e8f14228440746745851609920402707ce048ba53cad33413718d97920a94e72d7057d63bb01ff985e9031a83256c8b700752b7c6c2ba0c7ab1cd46476f40568d5b7296a5805b81b60"}}, &(0x7f00000000c0)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x700, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x2000000}, 0x0) 14:33:19 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xd000000, 0x0, 0x0) 14:33:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:33:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x900, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x3000000}, 0x0) 14:33:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:33:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:19 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x5000000}, 0x0) 14:33:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xa00, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x6000000}, 0x0) 14:33:19 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x10000000, 0x0, 0x0) 14:33:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x7000000}, 0x0) 14:33:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:33:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xb00, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:19 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:33:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8000000}, 0x0) 14:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xc00, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:20 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x40001, 0x0, 0x0, 0x0, 0xffffffffffffffff}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:20 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x20000000, 0x0, 0x0) 14:33:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:20 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:33:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x9000000}, 0x0) 14:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xf00, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:20 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xa000000}, 0x0) 14:33:20 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x1100, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:20 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x40000000, 0x0, 0x0) 14:33:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xc000000}, 0x0) 14:33:20 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x2000, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:20 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x18}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = getpgid(0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) r7 = accept4$inet(0xffffffffffffffff, &(0x7f000000ae80)={0x2, 0x0, @multicast2}, &(0x7f000000aec0)=0x10, 0x100800) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f000000af00)='/dev/bsg\x00', 0xb4080, 0x0) sendmmsg$unix(r2, &(0x7f000000b000)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0xff}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x38}, {&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)="780cb2270cdb809ea40837ad9cae25c86a674bb00809fac573d02a4c554a2daa01fdfc5ca0ec2468eaea0e8bfea7464283e77977e853d49e0ed6ee1ead00587cc1289b3e99558ae75910260fd4779d342a4042ddb6d3c810454ad528cff2bbca1d7475e6ff8278f6ec109e257b5ac7e05702095e7d49909b001ab55ebe12f851e2776b2bc099d5a76fb2d4670ab59003908e6242c3e836eeaba5fd27fb4235779ffcd655e9e48740069beb7bde15d8d3c39b9392147e0728a018bc32eb3828d368849f44d819db1fe8a4c0faaf2cfea3339167c9a3e29c8901", 0xd9}, {&(0x7f0000000140)="0568c336b4", 0x5}, {&(0x7f0000000600)="9267084ecde11298bf32f3d22be0f842e9b26102e28d2ec2c87461d9d9b131a80a9aa648c8edf046bef0e995d47f3bcf4c9e5118292b0a79f203d9e3b4804d8f951a0509538704cb535c97256523f26e3ca1c8e7c34df5977bc4147229c89a2e157edd14169f5c20f9a6e48c859ac66c8cee8ce7aa5d73a5c84d1fa3c15f522a1528da", 0x83}, {&(0x7f0000000280)="17ae5e6da658b0d0e28c897546d3ff4ed6e0e80e006a1dc2", 0x18}, {&(0x7f00000006c0)="c17ac3bd3ac9ddebaeeb45ed0d0b26032c4fd9ff980ee31ebe0e73ffe4ae3bea23c8ce284bcb02855bf8127489b4daf77c6559", 0x33}, {&(0x7f0000000700)="54ca04761ce19562ca33545bb0abad5d271b9407e8", 0x15}], 0x6, &(0x7f0000000880)=[@rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}], 0x58, 0x810}, {&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000980)="436e34ce9bf48f2f488eea0370532b116d7402f85d0c921afb05fb366bac824dd8ea61228a851e5d42cd104e18dcd36904a4583bb7c3b20b9e82c21f17148a5016f0b523efe23e1c76c952f0b130a1c98899393b7c25c76a6537bf6013d36ec98a99978eb517a480850626", 0x6b}], 0x1, &(0x7f0000000a40), 0x0, 0x40000}, {&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b00)="24d54759531de80a7d0d683c0a1f204f1e2e97c841019270854758836ef64a78d8932169bb87ba5d3a12e049ea5d8a341df7dbf90ab1d1345091ce7d1a49767d2a94a86e", 0x44}, {&(0x7f0000000b80)="c134f4e13ec36ce299d428b4ff814ca79215b5be271f0f00d94ebe705094ffc29bccf69fc465a5a9269f867f020e37d845e2ffd25b3b539c9a8a015e885e724a7d4c0c6c26344b7b38361be04e410e1b0cc13fabfc8c3fde0f9e9824b15c7dcbbb540f3f07e420a5a67d5649283d1c34215dc416733feea86e3cc6d22546ee6aef70aa4902edcbad234573e44558b7247105323390a12668df8435ea6aec9d395543344ba673ee90b87ea1651664874009b38f76c2ec5835caef343c6db7842a5d9d870432d21bb1d202a7622d97a2713d026c5d868d9ec3b8c26bb999e4aead88c73ff9577ee1f918958dd1155b0dded84883cf0b", 0xf5}], 0x2, 0x0, 0x0, 0x40000}, {&(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000d40)="9c20a6dd97b453a6ad1978cd07a77d0f9785675e6aeea0f652ae86356dfe4eb8e6c38c6561a8fe06480a69b670ff6b4f6d1e9e05272a4198008c0e2c2ef5bdc910d662727c8c90e1b5720d6f347f8b088855bae1ea4c94a53e36c7b9cf888492f1e16faa9c884d545d259b2c46229164392c02854dccc33a24f31157afbd657ceb6be2a2b78a5b105dfbcea306580e1b58130fd8d48800b35c08a386bbb393dce27d92f7fd06993f5179a0f829c1c77a1aa12beb34c1ca0d1901a85395555cd9232becff1fc322ad1fbd9e19bd2231a1872696456cb3183a8ff31d8d2756265cf2fde8df614f13e5472852ccc6476b92af2343e9b9dc93e4ff5ebdf5197792c135e6d63b3e289092db0de26a9461a8c17ae37afafa80bed1b3155682ec28f69c3d2e4ea85ffc5e253dab32f52cb877274c072c47ed1b06381928545314fb3388464918a9b6f95e9229cf0a2876a472e75eb9442de6724ec5d697b0d0db16195f313c543c2e92deaa5afc5ee6c9d062d351623104a95e24194afdea01d1ef4830ebb82e10bc2512a63af74e4cab4b57f07d4af440150208a71dca2102ef81904436386250e7f094c1f2070530c699c23174062eef74c8c1ee4e90808518ce6744d163c9680769e327d23075e7413dc4999ff65132ee89b2935769bf8ce46a4677156c6ceffc90241e6dc283bfb49036ab91dd68d47c9ba4571993cfc6bb5600e9331439a771f9e647747520aa4d4e4182f671538ec069862e1adf40b4864534ab69dc10119c6cbdc03d109be321afe0b908f7c832560d8426643602b0d625d00cb41d1c8855cbf44fbce8342e269cfe7080a407362814a9ebd413e6348c13490f080597dce13918fbde4e64b8775926b0e5989bbe2bce883158e132cbe518884896ddc892ada8656c24b3b35b003c3fb64f89bd563afdbd123348237c41681568c6e0bd70cca5e4be192a3956827b8a199af11a4c9c7c95d2f7b9c1d4b94b2cb413e4b0cb77c21c1f14e9bcc7a7aa33a070d3e81635cba4081ae38724a5a7bab004819809bd499a108e260dc6e4f2869f8a24454177fc44812611493e73486d182824d465da16daf5d0ba8bf98782d11a8a5fff6e693c0600491cc8b6ffaa2865ade3717351e316a5ebb8f8fdd7b8e7bcd100217dc4b5a74db35b9ec33a470cd3b7f0d62a816af3cc4fb703c8f741b78030f807d665e9b0f3ad7ade4da5b85e345756e0465fb9a684f9b67e7a9634d4c3f282ff915ca00bcb1034d151e06ef563df3340fbbb89f4c6dd8ad65e845c3fd54fc325b5adb3e17f957807c85733c4860068337450998fe7e23d719921b45074210b0da3e31a6aba55cafa156c9bdabb56ee2e48df7b27efce55a08ba41b1e7d1644e85a2a9cdc671cfeea8eb7f0db1e599fe3a43c4771deff692f3270fc9738faf8c2ad0bc5f1b7dab028fc487537bdd8ec752d310bbe37892c4110d83579e11e5713492d9c042986513fa4c7efc7a27e54c807d74c63d830be0309f4c443c75bfe165ffd04766e0fab45dc681d2ffd283def1e0ee9d3140f371b535470f29db01fc453c626c10c5f1f7dbe1ff82beb95699f78cf4c302468ce242c9ce73a55a5abe4a0afe5e8c064396a04c0cadf3e9f03949bfe196048dcac18f200c128fd5ba86697083fb059fde03bac845569f4f26c4c7a80a1029d68c9a72d6455a4442a079f5c89fa8564fac871fdac6ac35879b8e7efddfb154909ba82726e924cc053f1ad591767ad80d0012186a32d64b55aded796039009001bd05aebcbf6a72ba816f61ea2f95aa52723e6719b85655e19b8698f53f0830ae11307aa78d28ed1aff23912aac6deb5f14b00fb5b04ea8dc6cf228b0b4abb18124319e64ffb8f3875666bfdd27b557ebcb7e2a8b1ae744849f407d3a9971405941c7129cfefbcba226e7e661b526bf92659768e9bc1891bc185859e69a01c92c7ea180541f013b64b94d808b4d64c7940318424d6c44de838171e3683c68bd3795d3741bca786b13ec1815950a56614a47b70533a0c94dfed32d2e801fb0c001000a933ee3bd599ecf942b1643195b01846174de6c38afc9b0a4eff162f7f7e1b79430832812eb6db784a438fe8c7267eda0b62e163f62bf494ec68e30b2e8b0ba75fa6e3e302b3787f938549e40f9e792398b11f907ca794dc8b47b832e13ce298bd0725ebf98669275b4caabeaad9d5dc287346528ee4c0de3a188ed1b6ad0b92d6a5167a8100d1af2a4c27e7b1d717fdd1d0d72b1ae9d8590ba745445a54e8ebea52a548e76f410ba113989a4fefb6bc19ba9e07ad94a7979bb072d989f426686a4ec315a2a772d5ceb23a6ec9a2e3068fe0f40892920a139cb05518af7d38443b78e91a8ca8e74e761c3af9349b7fbe3a9f5feca4afee2de08f4323ba764bbfcec4c32caa45ffb285980ec2086b208ebfc82b19276a038c7211fe9455fe7e3d72b335201830a780aafde5fef0e3b7857e03d212c0cdb97014485df031a3d296cd0c23096152d45a2bf5a894642b6b4654e3fb4cd7f520c4fa14274c8277682150fd07c3d5a6ae333814413d96dc0554966a72e944733f51163948c007b493574f97069213e2d66e3751803c5187ae2d1879d37a2fdcdea9452ddc30e7cda872e89cc77e56c200ce78ada19fe98277ce5c85d80aa70027aa9af5031ca53102bd67918c2dd95d87e0a94677518f7b3f2763c653aea269779460d9fdf687dce5fceddedc844108f875116f2caa976b351aedec275d63d59cee2120b44fffc9b7f1e80a8f1ca6c61e6d94fbe2ae1de0d0c24d6a854c486cca8450ef392a54cf56389300b83fd072ffdb9527e84a0e962f0361497882095047c5b62dc470d26a41eec73aaa59c3fe8f3ac965eec405d51f42ea0718b8e94f84a6432df0b494742c1479421fd1e6c4ef62765e45bcfc9bbe806e36c092bf70b0fc334e44c0bcb155485cc9eba09f20eb8a95a6220fe6858e9fb930fbfdbe0776c2d61a5caec75c2e0ed3fc5cd62ea85b722f8f12eccf61f04123072c4325eb9f8b1531e082dbcc1b35d68271d291102783f744b3aef67a0d2b31ade41b12993bc1f938172dfe9b0d16cc7a40d5ae7418a1e188c0afce9edab7cdc409f66d1962041d56b386ff7f561f6d93340ecda4e03e02babb033eb585d0ab87113cb14d5eba1d07d56ca344493a11117f28f4ba4198378b5e03cd38d6e51988094bd1da869c8ceb4097c746da6a7b4b64042bf09fbee2f127f80c52297c8e26274f09b12c6fca0c88a83a5194ee06ae34c3fde801093f51eff920b403ecdca55c473be951627474f29bba7bd83034a457d8c267f15bfa184d35a47337d34c2fdbac6e599000d3f29653b3b81c5babdd395c4f9262a2b77fafc1da32a382f2ce4834cb4f6d558756db95643882413e2bcb01ead41ed7a0576f775ee120b19f496bb545d0623ebc3f04bb628ad25dc33740f7fde80773137a7469b5adc8258fa0f570b18d1d5ecfbeb9a87c7610c353944260b96de8dab1bef59d09774db3a5459ddc0ff54f7b3305d761344072ed6238b4ea9a382d0800945864e7e36bac0064bf22916c4fa2723481e5dfb335c3c4f50c4a53ca50970bb896d702fc61c856a3a8c7d9c8dfc0df964027c1c34311861d42cd16271fc06bacbaa6880b13e2588bfb7c2fc86d51f9787c44c976ed97ec94e42cba3bc5e6895cbf0131ea7e3979ac2660290a2ca789be89209fe562fe0ef7899eaafe945965c1b69c29d2fb0763c49523abd439a5cfa833433606461cc511a02ff9bbb1e4b3cd13d83022b8f177ffbd8b729bd05126e5172b29b42a7d7a8ae90bd5315bf7e4de4eeb41f1298c8dbe35ffff74abde8e70283cc6e4bb9b21ec7724180d004dede2ab880a6cb734cb80d8684b58f9fd0c9241d16924ac243516172fed367847c0e7b4cddc426ca49b4653c684d5f9274018c25700f4f93827413a6e96aa0d302a33e44f83ba6a0387ceeb7a64b5ce6dedbe3f9557591cce5b8bb1766bba06e17b9a997edc4794ee98975af31a74e13cc740185eead14524f4d8b4ef367161a5dd577b4a7da05c061ff6dfb60740d751d2caf486470c54fa84ddb15250c8c80f99b0b79572c861f0253546924fd66d5e66ee69f1edbdc102b59787930bacdd78f7bfa254f839f223c12259dc184a1d2659a668ce540852ec95cfd87ff263f7cb6a741abb9f608876ad5636586466312ee97b3201a45d4dd569c71a85916117625d3d31036e6966ad6a6a204373866287a3c9770fc08cadf65f9682c33c6a2f99557b099fb38ad64b6da1cc5d004f743586c5a21658ae9f2fdcdb3e50af8c490da1b5817704c81989d81cb2ecfbb408ddefe4db60c6947dbe97ca2fa4e74c90802ce35c480da50dc114f967c06bbb363ae752fbcebf4f35f6264c81f52c487ce2d120a5ff41567e4689b3fb455b8513d3da5f3c5bfdb36320fc2c41338058d7e20968a1f783a9d4ab9d2da58a1a3089a7a5d9d87958b5dae80e68025cba6f97d90b2195f2fc00a01a8eb013b75b79fed7f173046ccae5d0dfb8a64e1317dd31a78318a79ab8d242cc99bc2f01891f0b808af394baa1015f966d36f4e156f9c096efa0175bd49f65b099ffeac659cb06e70b91806709b5862cbf0a9919fe246a1654b7a1a831797e25f51d22f55e0dbc567e6ca73254dd0851d657aca28e5b465914d5b0e307813a2ded11da3ec55a6ad77dcaf1485bbf643b754f40caf9fb01f6bf9a6ce5cd7ec9483e6f327bfde14a9d126db4c56cb9c942d72c2855f7e302f6219b20d7102cf3d03d7a1305cb266fbcfa9477a5f43a8ea588c32291ef69b63e06beafc01567b6ebefe7a6a5e94fc5c4a149fdf9509f7830374fa41145211104423e58b4c1eda4727f695c1dd09cac5f1a237f80c4422494f2429f4a28bc1edc2e6dbe820c26ecf0d6985c5653ef2f0371779fefa60dcdc7aa4a0f80c9522ea4314188068203f285ccb3c944b8c45726855891041995a11a472193f6723744fea6ade578a0fcd9474e18e6b2641b4bc3bcbd85f5b0836614f4cd9d145955d826ca99284692dc53b5a70daf1108c08930d546d754415457a4f408976c9fdcbcc814afcd60b1c26dcea69692b4515c83a5bf37a92d727a7429dec1326fe52c7a9f181b0c6750420536e4a38928a46c1989bbc4b17886b05cd0ac7ccbc291143311727c0c7c6e0ec466c23aaf1d46f847a623e21e755492254db61e8c8ef17acff1a8fd910b9e5e608c299f0f0fcc7b5cf8573e0c1804f6e4cbbf015e88654d7e7d7fbf23c0d64288ae48ee87fbd03c90f83b6bc9bb356f47e81c17cbddae2ad1386b136e22987bb86af54fd52ab052fad37e09bae1bc5deb01edcf1083b34f9d62471a4b8d05b9af30ca5bd8ef6f710e3671ab1ab05e71db91ed9d2bfe9095c2cedb64573ec8f250ffd124cf273464d5621a5e53ca48f273c0eb9bef050ac85779d1eca1abf3a604f0a4dfcef037a6c3c85a9516d71537ef2cd940af91d9bb72d85c60dfdaa7f0a06a4601b7917ca282f90bc04d61455893dc8d90451883ebc52d5e6ba7b9fac0dd4ae186ba901dfcebb1db63c4683cd24939b60305a91948ee06408fc8ebf31eda64bde999896f3b17e15e5cc3fec567a038b851f407f3cf727e9478151d44f8c72245d30729aed50a7912f76517fb64e810716a7f7765867b96b6ea2bde22eb5b37d0c3bdb42c74ef7382690cbfc210abf0b999601a4bc2573c12d6bd7cce60cf6b6a4aece1205faeb786c69a0fcf2a4ea2726aa500ac8e4d3da32f2e26d74b61b2294af47fedbf", 0x1000}, {&(0x7f0000001d40)="7b53fe4b95bafa49e0a59879620906a4a265d6cd3a773f74b5dfa7ca61eedcd262f1ba4195c04c1238d641287ca46a76400eb7d3ee7f3d45c0f314ac247e2f95e2568f5e0d", 0x45}, {&(0x7f0000001dc0)="e31510e755c94d923406e03d980d3be93da14dd80d1c9a7335bfe80e5265d25278f35a6dd9c5ff60a9c3762ba9a0f0cf49b756059dedae3e", 0x38}, {&(0x7f0000001e00)="666847b925f0587fb6e9da30fd6bc41341ca9e85dc427a98730c582d4245f19bcda0c8739e1095993de2e77cf51e73d325bfcbaa4b2188c670ac", 0x3a}], 0x4, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x58, 0x4000004}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003300)=[{&(0x7f00000021c0)="8d143049c955bb3583075f57d7ae8e9b3e30cac6c25b8182aceae49144920f38cc2eb0333c53cd8bd15eed1fd89f9c", 0x2f}, {&(0x7f0000002200)="4bd6516cb04c90ae5f61c8531e", 0xd}, {&(0x7f0000002240)="c81946bc9e9181d77fc1f6250566dcabe228a0528b3088716df36eaaf6b39892372d02d72a2dabdc216c", 0x2a}, {&(0x7f0000003380)="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", 0x1010}, {&(0x7f0000003280)="6d6437893b142df22700fe07084f933d23445012aedd5cc077fa3b176c98920954f3b364f4d5fce198646a57e54d281537d6c14fddcf830b0b35396eadff0831666e3817769cfd4189c25892cc0f46bef0014110179e0485e45bea41", 0x5c}], 0x5, &(0x7f0000007dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138, 0x4000}, {&(0x7f0000007f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008100)=[{&(0x7f0000007f80)="d2e5f62dbb3f738b87ac3af58556aab334ae3294b2e4375797f8bce534f85bfadd66dc5069a032e284fa38374e288105faa5204f7877ab46c29c65dd5f0865653c5b9f796297bbe9ee275a7a60c2245d02476aa3197462562fc9714c86215b7ea0ac8e0975d6870884d9a838873576f350fd86a67224fe26becb2d47d062a3b807102d2363a1536c85374c3da6470e961b96ede3af17f153969d648bbff6eee32311bacd85ba3f13c50d1faaed05ce4b637aea20701b9a39994879e10dd20da5d0fce1788fd621ff7a6bdae0", 0xcc}, {&(0x7f0000008080)="511137d6ace24c69208347e8a66fe0f089328cf9fdc9e766cec32cb1d9876f83e6c1711babb54abce2cb631f3e712e471507f0839edd4ad9a77f8187a245fb8836041fe35a4c714ee5365f", 0x4b}], 0x2, &(0x7f0000008180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000ea13000000000003000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20000000}, {&(0x7f00000081c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000009780)=[{&(0x7f0000008240)="594457ad2dadcd670a8640b369df61cd68db3421bc8171da42bde660ce2e405f8a1ed7963ebfe8c29c01b8efda5c6eb72cf661e1da97bf9f010d2ec3b8877e15fa0371d6096b2416c92f2df1836e6cad362b46ab74cca6892d41ea29ac8bf6a45c4a795ffc8d8ffd", 0x68}, {&(0x7f00000082c0)="bd8526c50f591d0024b78e4b998a9fb166b1ba2491fcb4197260a539c6a6aaea31d6a75f8b0cf7bb7309b9307fea2fd3cdfea1bbfed469118473acba7b8df130c0e8f10ffb3fa6d364a9cbd5014e2c5dafe0e142255b14585dacffbd4e8a1ccc53a64d77afeb3f680d18844dee31c7e328fcc9652abe68e67ff42550a2281abc6ad712bcad4968fd7a5b2f2b4f31d84318d318983104d98f7f9e92b0db4e4eeedefaf26bba951484ca39b459085c8fddeb669d8e", 0xb4}, {&(0x7f0000008380)="c06c7854792ec077b5425aac951cb0f4bf0979c2ba20faeb2939f4", 0x1b}, {&(0x7f00000083c0)="07a46e0c289c33257d61159429f4e21d8e5c9a2cc0f8937e9029f2524f86b6d7504f9fa801a39617d5b46245a74d3884add1210168806637353d872ab1d5244bb6cb41ff4b765979e05b02551eb8cb52b460566cdfe5dd85044df2f9c8f23d4c6ebb0fadc6a057950baa25c1b021b376cb5a24509838b9da257bf7ff0c4b6bfa1cafc26d9d42134fe25cff6a54b1de", 0x8f}, {&(0x7f0000008480)="eb795d276b972ec3b018a5b8844d5cce8cd22d9bcc3595a1a8d4b12e555f28874f4c4eb852027bb08a3f509883d759feb2ba5c27934b8ea3068b2edb081bd0e12368261d14377d93497714fe124e14e286d2b06f14fbdae0735c7bfd57dbb5935f128c68551f65aa0e8108b97c4c25aec735af3bfc0fceb690e25810fec6f44d5eae518f968c89128f3619ed5d3c61e609c7d98d5f9d05d1dc5b32b0531fb284715c29727ed9d5bb153074e7acc2a3856860c150430339ee2c61861f8d504217ad1b960b155b860f1ebadd9dcec555263660d803fba6b5313e7568349f7478b46683796d2985d6f5d3d14da6c60fc145ba20de27356e2cda387c25d15bc4171dd479fce8db9eee94c3b0257843dad8b75e4b1f96ed114219f587c0044490441741968b5e1bb664686ea6766d2c2ac9390cc2f80833e0f3ab7072306094c37e2c635c853128e177eb53e76c7101642f283fd067e46c9e534ae7f0c48caefd8e7cef9e57fd5d45c2be086f25e12815449b125338dd0a7e392114e593c467c6b422282365db8b2ee811cf64faf04202a084cdfc40016ae4da78f0892884a7f250e6b0427c3395bb2de2bc43f8c044b53a73f1eab0a3a13e508bfe70dc09045db6638fe1237b713dee6327203588af95f4b024d5b8ca3093bc9ca348afc0ba5c21ef53f7586b828ccfa7848dfc1e0cf0c4175d67260f84fe39383b7a1e852b73e1e34622a1445f6babb304ea524a1d1190581c20ef5661bcf9f0e9e168f0cbf83a2e243d30fc1bf15e3513bd79fe51b34c53c40736e3f426618a2a1ec829e3f884ed89a5fbb2e3595bebaa7dbe9c5ab073409a009e98810a3e7656a7994a959f4f1aa29cf7d37c9b6204638ca948d90acb1a4f1d3a2333f3e66a92ba9d7a40509d94e8610c8bdf862ec461657e169bc0c567dc844af82619d2ef9cfd3f030b12e4c3edf3195439e87824ef05883bd3bcd4d7b861b2902e709ca03f3840509cfa489a857d5206c206e95f0c06295955290b7e993e1d1f8b3ff47f458031334fa3e2535e75654e56baa54bd2bd350cfc1c422bb72d85b708875dac02b63e4f3ebf75357487daa5e95aba4f68af62cb48cff949430773e5489959d7158b09e09a5f283d74b32c05b1e8cb18abc67f37b5201e718efc402ca3d0239dab7cf21972c968b2d63e745f68ca1c345b77c58e39a43d3e0e67cc31200f339467d04e196072cd48ba96e97a366f9e01267b20dc256d56ad65c133e5e4beb5578b2391eed81e220cb0da7c55da985b54110927c9a4098aa957e06a3f6bd3319e3692c512da19ec28c362b672da9e0525d7086e40673b3a239455d786f38c335f15b39137386239c4760f5f10d6f12ea40f64196966e0955beebe5b5c84fc28fe44a0cb901f0a4c33a2fe1aa84d7450c3e33f707336ef28af4f9f77d033303395d5fb42ddff4d02f36e33601b73356a19effb7683057932661f252b7be439e5b8bf45b96628ff33882b6683e42336fc81f84a14b9758f0f4d132d7d5c986d846e615b873993d7107169e667c2b87278a72ba79bfe0937e1c51afd4ef95da20258ae7afdf0021a888361afac2c9cccc2387eb91a6b2bf1cae968aaec4b36306088e38f6bebd4609c7aea96be4fd743f3c8140521e2a12472e714e7be707c3b228573d9320bc129f7134e52924d99c7bedc1cf52e20c24d5a872962fa377d18155ccc705304dfb755ddc08b285421559096ecbffc6b41047c88e2b0339203bd5cc15facdf5ab903747dbcfa493be2b3c08a63c2b76650e47129b8ecf640c21f63edc122427c851bb315a369f4b0b8ab55229b5d361599d424bb5420c48e8b0fd6a952304b127d4e13b8e4722ced82ce98f2bfe89e0f90347dccc749860f2417b64102297e645d58e26ec2787cd4173eb9562c96678356d602c79eee9e704a161e7a5d6af7d9be7e6c554df5a3375318f16b07114645c0fb64cb8bd495f4c5f6a4d7c4889ab5cb542f3f9d94af9e3302480c4f62c6210bf3d12b772bc26120fae09f45071e94ab09d749258846263a99707efc38686bb0fe67057b1b83b35ccc5b26ad6a0f8f929095151d13dc31a71c1a3cd8ed4c78723665bb9ef4700c12d6ac1bb97dadd48963102d635e060e2a5e126dca8676846343adcb5e263ab50e1452f71c29d591803d0d348b6f5fd1dfc8443bf63063aab8c03e476b7befe73ceb0a6ad62c956f78d2989bcbb3309b80b9b3e50e6b99b1f213a901763fcfb1eaabccdd928a78be19dd681fcae1f2d38375db9981739db5538507310d3a48af054ad48e516e7466d159c971fbff0911a5b5300e76d4edfc53f0e58c7b7871887139d1b0b1c1776f44f3848f320eb9b82bc1789c22d9410f44daa1426c1bf1480cb871a967d69c5af81c643a11deee7bd498a20c46e00528cb8ccff2477482a4c93df11ff8fa296a863882c9b5284820801e05dae0c8d63a805d7afdbf0a5e136208a4fdcc44d821d80eb150525c434850069ec121db604ef9fb4b251421ce824a4de48547fd9237ad5b57fc1ef174d37ccdf16eec4b4997dedbc4379686a6dde9f42411ab493442610e9effd393cf103ccd82f729d297d673f55a7a4bff463458dc7a1291edc653b5679166fcc07ab164ab352fa04af1c9a38a06200cc122b4f3e7639cbcc3ef23d0079bab9b02ea005a5a6d6fec87840d3af6151e91c08d94207b5f823fc1e66b4b66a8c9ffa766f3560a2b919950d008a3c1bf4bd9b81ddecfe2037ac6a03d9f67264964bae8ef0887c50e9d40cf59f331fbe40329b04e3992f312ff763dbac4a637e21ce8eaacd6bcbaa9f9303f3fe966ea040d9d4a1c0d1724f6c9627a7da18eb09c17926fa89215aa15f3609365e414aa39287b14be634231a5e4c83f6f0c58d14470ad5b47091cbacbe1bdaf6842361560d217a2a5d0a0d8f49fd9fcdadc2774f0e24a73b74ef90430fcfef7c1a679c6c93cf344a0e2e6e9e93b75d6a7213a8423bdd9510d71936b49459907712a966232f08d367589c6b6a2515875db7206b0be92906b93017d382259cd1f6ea8e40f4f06268ae926ec65c4439c81f7fce0d391e0d2c25c0e4ed4616deed973d97ff5681f09ce58509e22e7be1b120eeae50be18a2ccb8ca153ab7b84ed635591246f58579e0297f4535b535f0bb4352b4cfa6cdf0232c1f4eec20189d4633a0db48bc45d9459721d0f8d6b5abaa8ae83dcea7a361c570248cf8fc118a2a489c27c2ff2083283b7b54a87547ccafded5d0078e54b076a9092fbe43decc4ce673a9928c48be530ff10460dd9c4dbe61aef7bb9de16fa5fc225efa5b2d467af365b39a172afeca98719579e02fc40d71899b52b161b99368cf0e885aa0a16d525a11c85a937dea7d458bf77f090422c3f1f85ee5e51e1010af257b7248f9ca20cba4dcbe8551836487cf5a149cda20262cfb6820e2399f69b26f46e5ced1633586af13a4edce019f6b4eac9e7f25bb42c2841105c64e0837fbcfbd35187080ddbb274ec2cee4c4e807f88b6473848dd872698c01af3598803f24ec0ca40e78fc270216119fda090c7e2704e45414abbcf85735d55c305fa4cc8273b1e05aa8bb052459c3553ef3a36d22ad30a87b9df43f1e8c593acf1218c3f7a5924954b24f01e58e47c0efb55a322850ee4b4297e920e727b44ac769106bbcbef0609041ad080d97fc77c60176dda49e56f154fe551c50bd5b8041e953b9cc46c92628fa5bb2c43ee539230589ace228e69724a86e17e7261f6579326b1f0128a58ad40ab6f7534e6c076f386d2abca4b56fd8b777e342e3dad32c9d0854281259d48c563a9db967fbe02673ad8820fddaad1c3bd5592ef14f8272eee8b8920330e81facddec38b7300e99b560d46739e25aafde480e263337ebc59df4ffdb8aa101557b6856b35e8c6417e43aff057120467c1de8ba244b242ecc0fc9e15b6d1bc331abe954e7bdc7d5e925d4bebea0ffa3a17b975965d2627621f7bdb8a7da657f8eb0f716860411d31af8915df9aceb92f4a814f3c19c5c47e41bd4a92e58797b918648b479a37d9d905e8ae1649374ac1b2b29dac6a53b6e3d463603d6a0afe12b9d9a7cef4fddeeb88d64a862419e95c5f7d03bca5293a5bfcc1eb95b35f7a2e40b1c07ba636ecdb879237f8fdeb4f34945a9aea2f13fcbbd6b5acc1507d20beadc2d2b8d6a1ed9adb50eadce08322de1fdefd5e06ad9b5839f32ac108bae8c1a7e95f7118984cd7cf02464a0110c450ad3aec64b1eac4e2eba64864fd972dc24d099fcdad4b8997f3a25c449e0278b217b9863bed440b60381a69a35fb4ff1a9a19497ddd928f2306b7b188de9ec417e847e7d65fd7415de2111a46bf3c970348f36cea838a1573b09ffb6341c5dea0d5723509297b3476bab27b64a0650ea1bf0cf2709e33c3650f089fbae02ac9e274e7eaffa4effaded452b1d652683cf54c6304e349a0a7a51e0a358b107492b7f1fdca909388aacf0c1415c5df48af34804f9b5ca1223735b0a0e471a49814a4acd3c032f6eae3636c8e4e03e804f5534f64da736af6905cd34490f5a7c09270a3ff87dd8d8fa50b2f17edaf4973e5b284da0b414d5a40ccb0d3c24c4f722d32478967d1d30ef0dffe80f359d45abe04fb1cb0214a7260b769be5113b05495b939cc3ece0b5b7d526779e5dd6a3c4a3e16c0951dbbac46729a109c79810986c3d8f0ac3892d5b9bd119140d1bced1fbfe4c70a72495fc1dcb3ef588de4e5e794e8c8d6cf1e02466f53ff9cb30e51da36565bdd6af2efbdb3b969a3d376a4ccd07f4bae3622e1208361ae1e568b9d5ee3a0093565db224e8d3c1f3d9ce64da353afc2f9620a7002c621f994b232686c7ec762662bd1b0ba595822f4b0939878f9b6cf8cb52265a078f3fa32c9f83b512c08381a5a69d0c4e84b1ba5973a32c5a705ed1145c720d964bf3481fa00a5d24c494bcd7bda6c7a2de27a9e11c832cf452f8897b16a87b53c8d9b6976accaa06ee408040d08c0ea78713578f045248e525f9507df34462e376d157fa190d012427b0b84146ff8f559a25256c6608d1b691d141f9cca57057f66c5d1a53369cb2dad3762c4d1dead89c058db41e1813dcdf9d12bbc5c0e42ac83fc54552512a7359e8795831aa8993a11af443bb58703f2f0dc97cbaefd50f5cd220d028876be67e9c9c98bc8b104263a1236fcf44fb4462b87df953c1d7f309e5665fdd97e51eb471bad7cec1fe4b2651c5dd578110842f1fc6c8fa70627740cd4869415a2393805a83f2be8e5cab08192b513f3c21dc513f337bf4a64af983afdf2f8ff7627110a0ad05ae66ec5f76ff4bf926e935dc34914db6104853b8742f7407d5977675095cbe438d3a2bd66dd710c0d0ec16e4d41a43bfaf8eb235706bf3960f53a77ddb7390971d5c5a2027bfd0b26612240b64102e912a3140425718f019f39463f9f4429566cf70b23b55329122117619c13b6140935d3c1bdac0ab3b1b09c9f8638eaa9f2752ebdc6ac6bd40f04aabacbe101dd56a1df98fb01b3f78daf7800c61ab285fa5277f570eb056a9c8e0c0e3a965795015b61826f16b77be4f3e9140e990d35fa29f5fdfa3320f7e44ae2c01339b31deacc7e338e37b202d06c2652475e9dcf675f7f64b9e0deb0a7fd39e172b983b4de620c08682c5e9fe940b051a6bece495913e198f1ebb77899d945a3cad7d4046ddacbe835e6f104a7f2fadb122426af40ac12bfdf94a936a7d416d2701d1f2280069e741ab0610f3a054860ed77855bffa5cbbcd46f73ac577393bae27dcac87fd091af2a62", 0x1000}, {&(0x7f0000009480)="0ccc336e8a010f7ec47e1d42e6a00fa1c9d2098c6f27dbdac0f4ad47b051bca0bfecb8cf801cba2211f5bd392fe282a4f6d42af2e5cef18927bb5df534c2ea769fd5bdfd47ed86f1c599d4f19d5309bdee3d936ae42ed221c4a97c75d7b0d70fcff8d83ce7ceb95ad2390f0b2f6e92bdc67527e1086a39f2573837aa7d2f754d095d8af6b2c149a00574186ea0e7f73e86f42a44373b359a165ccf5a8703ebb22f74f8485c834c3fa714102ea33f959cde906598d146aede963061c990421d757257968e11f282815af9b09b9a034fd91f03021d0321933fe7b33934eb6830cbbd76500a76c65f4d69ec68249b4316222ec86625016bbd", 0xf7}, {&(0x7f0000009580)="7a540e6c65a457eabbcc", 0xa}, {&(0x7f00000095c0)="23653f57a79957f68f669f29f7b89edc708249baa584dee08cfa413959213b0c14ae63b11324225ec9ae805a05102557b51afd191540ef1be399314b08a91fd7635eec5e5f7132cd11d8c216743f49d69995da9df9622d54a9f7347d33ae0d843e18d0cd32c800c3f9263094ebf3fcd7ee2d94f7bb15e320425966fb60ccb25cae2115fee415513f79f7c3296bf88f17ea809d6f19219774a7b686", 0x9b}, {&(0x7f0000009680)="bd3587120bcdba60f19f7abe3eaf8fa0f285a8a1298327e61e238886f29ffea60740d7d3942b94ea87266858336acf422edd4e008e88e84e9dd3bb00724a61bbd388f2be4c6d19129b102e049ee80a8e2aa5c259725495833b2c57d3806e25f44ac4d1fce2fc660c87063ee9fab592a0f2f575ef4e743d989dfee88a41b14d1e68de898242284f4fbb86b4a3cdb2577843bb13b2237e6275345d64120e6dd28b6c24fc81d7d28888ec468e775414c8d3729fa8f40d16c0956f2ad9dd0c31a1754ec79a17b31c839972ce1e7b00c0ed5a8ae84532c5177d8484a182e5de001407ae1fe9e4ebcd279d988717168458e12ebd3b836a7e0a33", 0xf7}], 0x9, &(0x7f0000009a00)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r1, r2, r2, r2, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r1, 0xffffffffffffffff]}}], 0x90, 0x20000080}, {&(0x7f0000009ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000acc0)=[{&(0x7f0000009b40)="7f05457c94d89a2d5c864a48eb94c6feb0a1ca9c1a5de29dfccde7270ea73f6ca28ca048a353d2025e00858d3317569487119bbd30f65169c344404d063fe6758d07b27f00de001c3b3bf9e59d024691892cdc9a9a38d5b031fb737b6d240046fa9152852611038bf227563cbb45e83c7adb378ad99cf7748abc15b52b", 0x7d}, {&(0x7f0000009bc0)="f20972983513d056a3b45710b75648f9e4e528ead2d7ab19ad8c07850f7494c9ff3b6b10783a91c73a2df46bc09e32d463364033205f9934cf9c7f010880e448311abcd9c0edd9f91c3859367636fe659e5f4802764be8994fc14472a81588b1161dc4b0a413e4c09ad60073b39ad3eba58d1e56d75e1efa1cbe1e668f4ea067b322854283aa0d70b1abe30c11f666b402d1b08a4ab5449eacb5d1efac0b62badca4ed038acf2b65370529cd83b6f53a4c23e2b042021d49714697648e49889fb770d3f5d710bd6954ce52bf9ccb98c4dff9ce1efaa0b5f9787417f4e5cf3cf150", 0xe1}, {&(0x7f0000009cc0)="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", 0x1000}], 0x3, &(0x7f000000af40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r2]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r2, r4]}}], 0xc0, 0x8000}], 0x9, 0x21) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:20 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xf000000}, 0x0) 14:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x4788, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x10000000}, 0x0) 14:33:20 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x4888, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:21 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x42000000, 0x0, 0x0) 14:33:21 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x60000000}, 0x0) 14:33:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) [ 431.245108][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 431.245118][ T36] audit: type=1800 audit(1618324401.164:1035): pid=26496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15187 res=0 errno=0 14:33:21 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000280)) timer_create(0x2, &(0x7f0000000040)={0x0, 0x2d, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x5865, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:21 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x65580000}, 0x0) 14:33:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:21 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x46100000, 0x0, 0x0) 14:33:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) 14:33:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 431.738049][T26519] __nla_validate_parse: 12 callbacks suppressed [ 431.738064][T26519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 431.764656][ T36] audit: type=1800 audit(1618324401.684:1036): pid=26521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15235 res=0 errno=0 14:33:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:21 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x81000000}, 0x0) [ 431.892610][ T36] audit: type=1800 audit(1618324401.814:1037): pid=26521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15235 res=0 errno=0 14:33:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x6000, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:21 executing program 0: timer_create(0x4, &(0x7f0000000380)={0x0, 0x16}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000140)={{}, {r2, r3+60000000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r5, r6+60000000}}, &(0x7f0000000340)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:21 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:21 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x55020000, 0x0, 0x0) [ 432.023924][ T36] audit: type=1800 audit(1618324401.944:1038): pid=26555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14963 res=0 errno=0 [ 432.052976][T26558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:33:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x6558, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 432.113038][ T36] audit: type=1800 audit(1618324402.034:1039): pid=26555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14963 res=0 errno=0 14:33:22 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x81ffffff}, 0x0) [ 432.205073][T26583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:33:22 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xaa010000, 0x0, 0x0) [ 432.261337][ T36] audit: type=1800 audit(1618324402.184:1040): pid=26588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15105 res=0 errno=0 14:33:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x8100, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:22 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x88470000}, 0x0) [ 432.336523][ T36] audit: type=1800 audit(1618324402.214:1041): pid=26588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15105 res=0 errno=0 14:33:22 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) [ 432.401530][T26611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 432.425459][ T36] audit: type=1800 audit(1618324402.344:1042): pid=26610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15283 res=0 errno=0 [ 432.500925][ T36] audit: type=1800 audit(1618324402.424:1043): pid=26610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15283 res=0 errno=0 [ 433.448080][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.454401][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 14:33:24 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:33:24 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x8847, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:24 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x88480000}, 0x0) 14:33:24 executing program 0: r0 = getpgid(0x0) clone3(&(0x7f00000003c0)={0x80000, &(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000200), {0x7}, &(0x7f0000000240)=""/83, 0x53, &(0x7f0000000340)=""/35, &(0x7f0000000380)=[r0, r0, 0xffffffffffffffff], 0x3}, 0x58) timer_create(0x1, &(0x7f0000000440)={0x0, 0x3e, 0x0, @tid=r1}, &(0x7f0000000480)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:24 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xff8f0000, 0x0, 0x0) [ 435.102840][ T36] audit: type=1800 audit(1618324405.024:1044): pid=26646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15521 res=0 errno=0 [ 435.104165][T26648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:33:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x88a8ffff}, 0x0) 14:33:25 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x68, 0x0, 0xc00, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x100}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x114d30e2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x80}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x40}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x8848, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x9af8f9d4}, 0x0) 14:33:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 435.323726][T26676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:25 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000000000, 0x0, 0x0) 14:33:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x9effffff}, 0x0) 14:33:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) [ 435.472566][T26699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) [ 435.682290][T26726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:26 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{r1, r2+10000000}}, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0x10) fcntl$lock(r5, 0x25, &(0x7f0000002000)={0x0, 0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xd4f9f89a}, 0x0) 14:33:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:33:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x30000000000000, 0x0, 0x0) 14:33:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xefffffff}, 0x0) [ 436.189495][T26764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 436.341641][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 436.341650][ T36] audit: type=1800 audit(1618324406.254:1054): pid=26780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15734 res=0 errno=0 [ 436.357752][T26784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 436.509152][ T36] audit: type=1800 audit(1618324406.434:1055): pid=26780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15734 res=0 errno=0 14:33:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0) 14:33:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:33:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 436.675182][ T36] audit: type=1800 audit(1618324406.594:1056): pid=26809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15738 res=0 errno=0 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x80000000000000, 0x0, 0x0) 14:33:26 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x16, 0x0, @thr={&(0x7f0000000340)="cd058544b7f886ab0d438dbd78d5a5f7688619b8bae945a65026332aebc73f151885434a188cd251ae8c6a938f4cf7cb3c1bb2394e5534478bb42939563993c6a9371819cc664ebce5ef440c42dc3a87380331ee1f557b113147bce9dcbb93881945987b66416f371f9b6c00000000", &(0x7f00000003c0)="152a753cd6eb60c69a4ba07343ac805c9bb4d22581a01ad127fd52c898a183320756ce272c2e110f9696f68a54c334efeefc4b9d6e681a9d0d05c1b78ab0321f9827b8262120157bdc67c9c52897dd48b8578b0af92860b7"}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x4, 0x60081) r3 = socket$inet6(0xa, 0x802, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000700)={{}, r4, 0xa, @inherit={0x58, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000020000000000000008000000000000000dcc5a78000000002000000000000000080000050000000007000000000000000300000000000000250000000000000002000000e07f00"/88]}, @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000500)={{r2}, r4, 0x14, @inherit={0x90, &(0x7f0000000200)={0x1, 0x9, 0x3, 0x3, {0x10, 0x3f, 0x0, 0x5}, [0x9, 0x8, 0x9, 0x1f, 0xfff, 0x7, 0xff, 0x1, 0x80]}}, @name="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"}) 14:33:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffa888}, 0x0) 14:33:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 436.771962][ T36] audit: type=1800 audit(1618324406.624:1057): pid=26809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15738 res=0 errno=0 [ 436.793079][T26826] __nla_validate_parse: 1 callbacks suppressed [ 436.793144][T26826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0) [ 436.913395][T26847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 436.931076][ T36] audit: type=1800 audit(1618324406.814:1058): pid=26840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15736 res=0 errno=0 14:33:26 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) [ 437.026399][ T36] audit: type=1800 audit(1618324406.824:1059): pid=26840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15736 res=0 errno=0 14:33:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffff81}, 0x0) 14:33:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 437.122288][ T36] audit: type=1800 audit(1618324406.974:1060): pid=26859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15726 res=0 errno=0 14:33:27 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) [ 437.164221][T26869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffff9e}, 0x0) [ 437.215316][ T36] audit: type=1800 audit(1618324406.984:1061): pid=26859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15726 res=0 errno=0 [ 437.280987][ T36] audit: type=1800 audit(1618324407.134:1062): pid=26874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15728 res=0 errno=0 [ 437.346716][ T36] audit: type=1800 audit(1618324407.164:1063): pid=26874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15728 res=0 errno=0 14:33:27 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000200)="3d7a37012375a63c0bd200b0c5405b1aab0eb098c08b857b06efc104219bf6279e2c86c89196df18edc13b106af0f362cfa027d345e644223952f6861537d5a6d64c6763fdeff807ee8dd432f73c243acdbfa2938ff5a7a1f71f503c8528abc927587bdc9c1deccd6a3d3ef4be88f7c2eb9d4c2709ef", 0x76}, {&(0x7f0000000340)="5fa85707b0533a0d3f9a6e5a9416a2ea61494c9a121c21ded065afd5190dce556e78ba2b04a6e045b3460d479a5f90a3df43aed9dbe626a8d0765a46532fac2a2770978e9f8b3b258522d1", 0x4b}, {&(0x7f0000000040)="3922b52274a33656520e", 0xa}, {&(0x7f00000003c0)="9a4980f587f6bdf8b9f03106a61a9104d12b0986f810fa23fa6d08e30fc75d848af33dd064b8cc1035306e0f3419db311f1341fd6c603cdf7b66d6336fc6c6f642dc4afc368bc1b03d10d8080199081cfe10daa2084e", 0x56}, {&(0x7f0000000500)="eb701aaa2e1fe6385f9c645da5bac2bb773381204876cccaae6d5edaf33c3c2c655d09d0e62f2925e7b7371d0612187d10c9f78c7c4b0c271e429e6d333a0376d37edf10b30da416f3567f941375560d8aef457ed08d90334bcc59e78363da462705cf4c3f865658374faa2b04a654789c6b88155fbad17a797223f9cbab4fa68bca412ce62689b9c8f7fb457504c44ff4ad0d23fb990ffcca", 0x99}], 0x5, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:27 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x100000000000000, 0x0, 0x0) 14:33:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:27 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffffef}, 0x0) 14:33:27 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) [ 437.526694][T26906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0) 14:33:27 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) 14:33:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 437.695126][T26936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:27 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0) 14:33:27 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x200000000000000, 0x0, 0x0) 14:33:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0) [ 438.050174][T26968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:33:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:33:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0) 14:33:28 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="a5002bbd7000ffdbdfa06b00000c0800021480e1b57c95a5296b00000080000000007ec3127c8201609150ddfd000000", @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC], 0x1d4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={0x0, 0x100000000, 0x8000}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0x407, 0x401, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001200)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001600)={0x0, 0x0, {0x2, @usage=0x1ff, 0x0, 0x8, 0x200, 0xf, 0x2, 0xffffffffffff8001, 0xe0, @struct={0x1}, 0x3, 0x1, [0x8, 0x4, 0x58, 0xffff, 0x6]}, {0x100000000, @usage=0x9ca, r3, 0x2, 0xfff, 0xffffffffffffffff, 0x9, 0x80, 0x62, @usage=0x100, 0x100, 0x0, [0x5, 0x6, 0x6, 0x1, 0x8, 0x7946]}, {0x200000007, @struct={0x8, 0x12}, 0x0, 0x20, 0x2, 0x83, 0x10001, 0x15b575bac000, 0x28, @struct={0x5, 0x1f}, 0x87, 0x8, [0x20, 0x4, 0x7fff, 0x538b7e3d, 0xfffffffffffffffb, 0x80000001]}, {0x401, 0x1f, 0x96}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x9, 0x6, 0x1}) [ 438.300026][T26995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) 14:33:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x400000000000000}, 0x0) [ 438.506235][T27022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:28 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x204000000000000, 0x0, 0x0) 14:33:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:33:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x500000000000000}, 0x0) 14:33:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) [ 438.645143][T27040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x11}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 438.852352][T27065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x600000000000000}, 0x0) 14:33:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x60}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:31 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:31 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x604000000000000, 0x0, 0x0) 14:33:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) [ 441.422801][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 441.422813][ T36] audit: type=1800 audit(1618324411.344:1082): pid=27093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15761 res=0 errno=0 14:33:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x300}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 441.494758][ T36] audit: type=1800 audit(1618324411.394:1083): pid=27093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15761 res=0 errno=0 14:33:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x700000000000000}, 0x0) 14:33:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:33:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x500}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 441.671637][ T36] audit: type=1800 audit(1618324411.584:1084): pid=27122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15759 res=0 errno=0 14:33:31 executing program 0: timer_create(0x6, &(0x7f0000000300)={0x0, 0x12, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, &(0x7f00000000c0)) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x800000000000000}, 0x0) 14:33:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) [ 441.785203][ T36] audit: type=1800 audit(1618324411.594:1085): pid=27122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15759 res=0 errno=0 14:33:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x600}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 441.872427][ T36] audit: type=1800 audit(1618324411.764:1086): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15752 res=0 errno=0 14:33:31 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x800000000000000, 0x0, 0x0) 14:33:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x900000000000000}, 0x0) 14:33:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) [ 441.959806][ T36] audit: type=1800 audit(1618324411.764:1087): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15752 res=0 errno=0 [ 441.962273][T27154] __nla_validate_parse: 3 callbacks suppressed [ 441.962285][T27154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 442.064024][ T36] audit: type=1800 audit(1618324411.974:1088): pid=27164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13898 res=0 errno=0 14:33:32 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xa00000000000000}, 0x0) 14:33:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x700}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:32 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) [ 442.124424][ T36] audit: type=1800 audit(1618324412.014:1089): pid=27164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13898 res=0 errno=0 [ 442.191988][T27181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 442.231633][ T36] audit: type=1800 audit(1618324412.154:1090): pid=27183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15769 res=0 errno=0 [ 442.312686][ T36] audit: type=1800 audit(1618324412.214:1091): pid=27183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15769 res=0 errno=0 14:33:34 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:34 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:33:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x900}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xc00000000000000}, 0x0) 14:33:34 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xd00000000000000, 0x0, 0x0) 14:33:34 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="8c234e0ea87355f31c8291c1f73c8ab9c0a2a9628b60032dc02f1c9e0000418b7251eb8f4d4a8f1c4ba3e717466345ed2d0f9b091cd93680d7c975a3fcaad720047b599277ef166f0faa2f10e7a1456f9ac613202134f1d46795c928ad9424589774f0"], 0x48}}, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r3, 0xffffffffffffffff) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000200)="3f661a1e40d981488951262d88cf6b0a6e95a0b07906dedd63204c0b0ae07d4cb06f839d76fceae61dd31da6796150a23dc7606b82cb6e6cee90a7c054d9736511350c99c165b37a7e0d921c48451c1db89c9ad92daeaa9c507a", 0x5a, 0xffffffffffffffe1, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x3fe, 0xffffffffffffffff, &(0x7f0000000340)="8c08cfa5af337bd9e3df27a1aa1856d50713943ba87508eafe97e98d1519b8755c67955bf9d628d2b7231d731a24bca5af3f2fc70977cfde40d9ec9a219dee6daf73914a732a17becd413d08064a4ce5b7968c143ee150f6efc6", 0x5a, 0x80000040}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x800, 0xffffffffffffffff, &(0x7f00000003c0)="ab5181b2d8ad4c723bf44ec9892961c4d4adc08b3e481787b67147472312824a9952859998057c373b629703e086428f63744726e4f1b2bbe8a2b03c67c2c50b349630d7cd3915f8521ab369d6ccb3c93d0f4a7ff07fd0d42b2b36440f482a9de927b06b9eb6b4210382cbfcb28cb0858e8114", 0x73, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x1001, r1, &(0x7f0000000500)="261147edc5a51f766fe9d8909b54efc9a886ab669a4297acdf605df9f17005c73b92f6269a70189cbb54a17af4e0b9b24cceb48183863ba60827087b4d42450674a002d9453294044b114f3055a55f194679ffd681eb8d75a5f7d63ec4bf631f8bd2f2dba0d1f8eb081b00c455ec7b5c8e9c0e6e7c5c076d19e9c68bbb1f031920b77f22986969f976a44a5714bde18bd191dac3f9332ebec95b886eb931a0da7103fc1090d6", 0xa6, 0x0, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffffff, &(0x7f0000000600)="cc9509891bbf2bea955605e5effcff309b099bf038836d952c7c69a9748a869f0bab7ca83276156d7be03b28f23afa59e28d886fc6bfc5ed60c9723497ae86c604", 0x41, 0x1, 0x0, 0x4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x3ca6, r1, &(0x7f00000007c0)="c12fa9b7cc1fd3cada6939e8d71bfd775b0fc509562e6fa2dce19e790b19ffc6c1101b047ac868935cb895a40de3b2c0e0953a5b3d4ef6a6e556392b693848972bb7444b055dffab92dbd419a9d3f2982572d948197609fa3bca351d67298b85b2a4ce2b5f9c74df4ed63a4a1d9cfcfbfe253a4dff511921619ccae403ff74f9981ac545f80c3084e16091d3c3cd70873ce59507ffa5a8f5a24c0dc6a168a7d4c7c36059b5d2dcb5e8072b0d3ea3c800b5f5c0e0ae459e5e0f84485b0290", 0xbe, 0x2, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000700)="d5227f6636c48db85689cc2f04f6a9280e51d21c41195dc6ae8a38b21c1d1e96b387", 0x22, 0x100, 0x0, 0x2, r3}]) 14:33:34 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xf00000000000000}, 0x0) [ 444.872322][T27215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x1000000000000000}, 0x0) 14:33:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:33:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 445.123367][T27247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x6000000000000000}, 0x0) 14:33:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:35 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000000000000, 0x0, 0x0) [ 445.325462][T27271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:35 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r3 = eventfd(0x1ff) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000200)="4fcef0916addf6a23bb7e1ed75ce55470b0a6119741138fb9037c907f535a9ccfc2c1f7f08705ebc58e6a5c596e390dde6c2207f673004c831fc246f956afa65ecabd1c0e68d9c5dc4d22dd42c32ec23043b5f0a47634d8bf63b48d362d311071e6c0ed3a606638f58452c081cfcdbe7ac61db910a56dfaa0cf643725597da277d19bbfb76bc0fe10737367a6acc732e813fbd9cbfeb307186a476f411d4895921", 0xa1, 0x8, 0x0, 0x3, r3}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x6558000000000000}, 0x0) 14:33:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) 14:33:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8000000000000000}, 0x0) 14:33:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) [ 445.571909][T27308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:35 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8100000000000000}, 0x0) 14:33:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 445.795933][T27336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:35 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2000000000000000, 0x0, 0x0) 14:33:36 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x41}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000340)={{r2, r3+10000000}}, &(0x7f0000000380)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {r4, r5+60000000}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f0000002000)) fcntl$lock(r7, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:33:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x81ffffff00000000}, 0x0) 14:33:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:36 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4000000000000000, 0x0, 0x0) 14:33:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8847000000000000}, 0x0) 14:33:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) [ 446.427748][T27372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 446.525962][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 446.525973][ T36] audit: type=1800 audit(1618324416.444:1108): pid=27385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15808 res=0 errno=0 14:33:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x8848000000000000}, 0x0) 14:33:36 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) [ 446.643519][ T36] audit: type=1800 audit(1618324416.474:1109): pid=27385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15808 res=0 errno=0 [ 446.690610][T27404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 446.714048][ T36] audit: type=1800 audit(1618324416.634:1110): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15808 res=0 errno=0 [ 446.793676][ T36] audit: type=1800 audit(1618324416.674:1111): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15808 res=0 errno=0 14:33:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:39 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:33:39 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x88a8ffff00000000}, 0x0) 14:33:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4788}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:39 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4200000000000000, 0x0, 0x0) [ 449.473594][T27429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 449.483691][ T36] audit: type=1800 audit(1618324419.415:1112): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15824 res=0 errno=0 14:33:39 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) [ 449.582157][ T36] audit: type=1800 audit(1618324419.505:1113): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15824 res=0 errno=0 14:33:39 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x9af8f9d400000000}, 0x0) 14:33:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4888}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:39 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) [ 449.737745][T27460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:39 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4610000000000000, 0x0, 0x0) [ 449.768829][ T36] audit: type=1800 audit(1618324419.695:1114): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15816 res=0 errno=0 [ 449.841282][ T36] audit: type=1800 audit(1618324419.715:1115): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15816 res=0 errno=0 14:33:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5865}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:40 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) io_setup(0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xc) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0) 14:33:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:33:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:40 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x5502000000000000, 0x0, 0x0) 14:33:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) [ 450.444551][T27501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 450.445520][ T36] audit: type=1800 audit(1618324420.365:1116): pid=27498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15837 res=0 errno=0 14:33:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xefffffff00000000}, 0x0) [ 450.528786][ T36] audit: type=1800 audit(1618324420.455:1117): pid=27498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15837 res=0 errno=0 14:33:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) [ 450.673115][T27532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0) 14:33:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6558}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 450.867680][T27553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:41 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001500)) timer_settime(0x0, 0x1, &(0x7f0000001680)={{}, {0x77359400}}, &(0x7f00000016c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) timer_create(0x6, &(0x7f0000000040)={0x0, 0x40, 0x2, @thr={&(0x7f0000000500)="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", &(0x7f0000000200)="dc8d1d0da8969fe1e17b2cb314622fd771c5a0e38e9da8d3dde05d3cee0d4b2f58e5d9073edf75bb24945346b4639ee770c525b0a5a3c164c5d3f3ac3f84c1854be117c2cff145bead15aafbe00a2a8f07e366aed17a56639fa0077e8d5ad713815950777662c905df48f99032dd700e67503dc9d98206e7aad76fa1155a5df2d0277ff3cef4a74e658446a3c987552355420cd8af0c76ac2210cacf54e87fc171dbb6becb666c482ed4de3802100b70e68b10ce"}}, &(0x7f00000000c0)) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) timer_create(0x3, &(0x7f0000000400)={0x0, 0x8, 0x2, @thr={&(0x7f0000000340)="4045ecace0f07529d79a3c0cdc5328b3e9681a0920895ff983c5e57a71160fa1edc5e87d335b377d46dd4e3786a4f72dc291c4136d232f676c38b8e25020213890fea485e751e767f9bd24a9df51f280f7631b0de1923bab284b88", &(0x7f00000003c0)="6b474c2779373af6e8eb5509f5146f08dc16e6a7bea98a2f1fa4f4649c83c473"}}, &(0x7f0000000440)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000001540)={{0x77359400}, {0x77359400}}, &(0x7f0000001580)) 14:33:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:41 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:41 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xaa01000000000000, 0x0, 0x0) 14:33:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:41 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) 14:33:41 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0) [ 451.433048][T27580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:41 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8847}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:41 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0) 14:33:41 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) [ 451.641683][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 451.695780][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 451.695811][ T36] audit: type=1800 audit(1618324421.615:1126): pid=27612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15857 res=0 errno=0 [ 451.817514][ T36] audit: type=1800 audit(1618324421.655:1127): pid=27612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15857 res=0 errno=0 14:33:42 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) io_setup(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {r3, r4+10000000}}, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) 14:33:42 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0) 14:33:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8848}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:42 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xff8f000000000000, 0x0, 0x0) [ 452.382936][ T36] audit: type=1800 audit(1618324422.305:1128): pid=27641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15869 res=0 errno=0 [ 452.385685][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) [ 452.443055][ T36] audit: type=1800 audit(1618324422.345:1129): pid=27641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15869 res=0 errno=0 14:33:42 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0) 14:33:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:42 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x5502000000000000, 0x0, 0x0) [ 452.590804][T27668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 452.612191][ T36] audit: type=1800 audit(1618324422.535:1130): pid=27669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15876 res=0 errno=0 14:33:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:42 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0) 14:33:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 452.738885][ T36] audit: type=1800 audit(1618324422.535:1131): pid=27669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15876 res=0 errno=0 14:33:42 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xffffffff00000000, 0x0, 0x0) 14:33:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:42 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x6}, 0x0) [ 452.838970][T27696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 452.851252][ T36] audit: type=1800 audit(1618324422.755:1132): pid=27693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15873 res=0 errno=0 [ 452.953589][ T36] audit: type=1800 audit(1618324422.775:1133): pid=27693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15873 res=0 errno=0 14:33:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) [ 453.066183][ T36] audit: type=1800 audit(1618324422.965:1134): pid=27716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15866 res=0 errno=0 14:33:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x7}, 0x0) 14:33:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 453.206939][ T36] audit: type=1800 audit(1618324422.965:1135): pid=27716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15866 res=0 errno=0 14:33:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x8}, 0x0) 14:33:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:43 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x2) 14:33:43 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x4200000000000000, 0x0, 0x0) 14:33:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0) 14:33:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:33:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xa}, 0x0) 14:33:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:33:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xc}, 0x0) 14:33:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:43 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x8) 14:33:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) 14:33:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xf}, 0x0) 14:33:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:43 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x604000000000000, 0x0, 0x0) [ 454.129053][T27841] ================================================================== [ 454.137159][T27841] BUG: KCSAN: data-race in inet_send_prepare / sctp_get_port_local [ 454.145055][T27841] [ 454.147377][T27841] write to 0xffff88801f42b3ce of 2 bytes by task 27834 on cpu 1: [ 454.155086][T27841] sctp_get_port_local+0x765/0xab0 [ 454.161251][T27841] sctp_do_bind+0x38d/0x4a0 [ 454.165762][T27841] sctp_bind+0x6a/0x80 [ 454.169829][T27841] inet6_bind+0x6a/0x160 [ 454.174059][T27841] __sys_bind+0x200/0x290 [ 454.178399][T27841] __x64_sys_bind+0x3d/0x50 [ 454.182894][T27841] do_syscall_64+0x39/0x80 [ 454.187308][T27841] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 454.193198][T27841] [ 454.195516][T27841] read to 0xffff88801f42b3ce of 2 bytes by task 27841 on cpu 0: [ 454.203218][T27841] inet_send_prepare+0x21/0x210 [ 454.208064][T27841] inet_sendmsg+0x29/0x80 [ 454.212384][T27841] __sys_sendto+0x2a8/0x370 [ 454.216909][T27841] __x64_sys_sendto+0x74/0x90 [ 454.221584][T27841] do_syscall_64+0x39/0x80 14:33:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 454.225997][T27841] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 454.231891][T27841] [ 454.234205][T27841] Reported by Kernel Concurrency Sanitizer on: [ 454.240342][T27841] CPU: 0 PID: 27841 Comm: syz-executor.4 Not tainted 5.12.0-rc7-syzkaller #0 [ 454.249098][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.259142][T27841] ================================================================== 14:33:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x10}, 0x0) 14:33:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x60}, 0x0) 14:33:44 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x2) 14:33:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0) 14:33:44 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0xd) 14:33:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0) 14:33:44 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:33:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 454.780383][T27899] __nla_validate_parse: 7 callbacks suppressed [ 454.780395][T27899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x600}, 0x0) 14:33:44 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:33:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 14:33:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x700}, 0x0) 14:33:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x500}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 455.018801][T27927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 455.114599][T27933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:33:45 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x10) 14:33:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x204000000000000, 0x0, 0x0) 14:33:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) [ 455.237938][T27956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xa00}, 0x0) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) [ 455.441768][T27989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:45 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x30) 14:33:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xc00}, 0x0) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:33:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:45 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0xd) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xf00}, 0x0) [ 455.677726][T28014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x4788}, 0x0) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x42) 14:33:45 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x4888}, 0x0) 14:33:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x5865}, 0x0) [ 456.102195][T28057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:33:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x6000}, 0x0) [ 456.158978][T28062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:33:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x11}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:46 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0) [ 456.330399][T28097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:46 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x1aa) 14:33:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x6558}, 0x0) 14:33:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) 14:33:46 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000000000, 0x0, 0x0) 14:33:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x60}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 456.548060][T28117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x8100}, 0x0) 14:33:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:33:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x300}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) [ 456.702146][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 456.702158][ T36] audit: type=1800 audit(1618324426.625:1180): pid=28139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14449 res=0 errno=0 14:33:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x8847}, 0x0) 14:33:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 456.861501][ T36] audit: type=1800 audit(1618324426.785:1181): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14449 res=0 errno=0 [ 456.935351][ T36] audit: type=1800 audit(1618324426.785:1182): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14449 res=0 errno=0 14:33:46 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x204) 14:33:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x500}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x8848}, 0x0) 14:33:46 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x42) 14:33:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 457.042790][ T36] audit: type=1800 audit(1618324426.965:1183): pid=28170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14675 res=0 errno=0 14:33:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0) 14:33:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x600}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) [ 457.164298][ T36] audit: type=1800 audit(1618324426.965:1184): pid=28170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14675 res=0 errno=0 14:33:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x700}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) [ 457.323711][ T36] audit: type=1800 audit(1618324427.115:1185): pid=28195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14675 res=0 errno=0 [ 457.378776][ T36] audit: type=1800 audit(1618324427.135:1186): pid=28195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14675 res=0 errno=0 14:33:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:47 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x255) 14:33:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0) 14:33:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x900}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) 14:33:47 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x42) [ 457.544812][ T36] audit: type=1800 audit(1618324427.465:1187): pid=28232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14625 res=0 errno=0 14:33:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0) [ 457.593360][ T36] audit: type=1800 audit(1618324427.465:1188): pid=28232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14625 res=0 errno=0 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) [ 457.712070][ T36] audit: type=1800 audit(1618324427.635:1189): pid=28256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14497 res=0 errno=0 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) 14:33:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0) 14:33:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:47 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x402) 14:33:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0) 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, 0x3}, 0x1c) 14:33:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) 14:33:47 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, 0x3}, 0x1c) 14:33:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0) 14:33:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:48 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x406) 14:33:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x3}, 0x1c) 14:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x5000000}, 0x0) 14:33:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:48 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0) 14:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x3}, 0x1c) 14:33:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x6000000}, 0x0) 14:33:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x7000000}, 0x0) 14:33:48 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x604) 14:33:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x3}, 0x1c) 14:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:48 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x402) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x8000000}, 0x0) 14:33:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4788}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x9000000}, 0x0) 14:33:48 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:33:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4888}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 14:33:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xa000000}, 0x0) 14:33:49 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0xd00) 14:33:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x3}, 0x1c) 14:33:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5865}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 14:33:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) 14:33:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xc000000}, 0x0) 14:33:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3}, 0x1c) 14:33:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0xf000000}, 0x0) 14:33:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc}) 14:33:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3}, 0x1c) 14:33:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x1100, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:49 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x1046) 14:33:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc}) 14:33:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x10000000}, 0x0) 14:33:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6558}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc}) 14:33:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc}) 14:33:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x60000000}, 0x0) 14:33:49 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0xd00) 14:33:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3}, 0x1c) 14:33:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x3}, 0x1c) [ 459.841108][T28542] __nla_validate_parse: 17 callbacks suppressed [ 459.841120][T28542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:50 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x2000) 14:33:50 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x3}, 0x1c) 14:33:50 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x65580000}, 0x0) 14:33:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8847}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x3}, 0x1c) 14:33:50 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x1046) 14:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xc00, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x3}, 0x1c) [ 460.163196][T28575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:50 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x81000000}, 0x0) [ 460.251127][T28583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:33:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8848}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x3}, 0x1c) 14:33:50 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x40001, 0x0, 0x0, 0x0, 0xffffffffffffffff}) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x22}}, 0x0) [ 460.427785][T28609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:50 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x3000) 14:33:50 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x81ffffff}, 0x0) 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x3}, 0x1c) 14:33:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0xb00, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:50 executing program 1: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xd000000, 0x0, 0x0) 14:33:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x3}, 0x1c) [ 460.634250][T28633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:50 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x88470000}, 0x0) [ 460.693121][T28636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x3}, 0x1c) 14:33:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}]}}]}, 0x50}}, 0x0) 14:33:50 executing program 0: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xd000000, 0x0, 0x0) 14:33:50 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\n', 0x1, 0x40, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x3}, 0x1c) [ 460.838128][T28672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:33:50 executing program 3: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2044}}, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x4000) 14:33:50 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x100000000) socket$unix(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x88480000}, 0x0) 14:33:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLO