Warning: Permanently added '[localhost]:18709' (ECDSA) to the list of known hosts. 2026/01/15 08:24:37 fuzzer started 2026/01/15 08:24:37 dialing manager at localhost:35245 syzkaller login: [ 50.224774] cgroup: Unknown subsys name 'net' [ 50.289007] cgroup: Unknown subsys name 'cpuset' [ 50.305114] cgroup: Unknown subsys name 'rlimit' 2026/01/15 08:24:47 syscalls: 2214 2026/01/15 08:24:47 code coverage: enabled 2026/01/15 08:24:47 comparison tracing: enabled 2026/01/15 08:24:47 extra coverage: enabled 2026/01/15 08:24:47 setuid sandbox: enabled 2026/01/15 08:24:47 namespace sandbox: enabled 2026/01/15 08:24:47 Android sandbox: enabled 2026/01/15 08:24:47 fault injection: enabled 2026/01/15 08:24:47 leak checking: enabled 2026/01/15 08:24:47 net packet injection: enabled 2026/01/15 08:24:47 net device setup: enabled 2026/01/15 08:24:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 08:24:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 08:24:47 USB emulation: enabled 2026/01/15 08:24:47 hci packet injection: enabled 2026/01/15 08:24:47 wifi device emulation: enabled 2026/01/15 08:24:47 802.15.4 emulation: enabled 2026/01/15 08:24:47 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/15 08:24:47 fetching corpus: 34, signal 13944/17580 (executing program) 2026/01/15 08:24:47 fetching corpus: 71, signal 32668/37430 (executing program) 2026/01/15 08:24:47 fetching corpus: 121, signal 46649/52371 (executing program) 2026/01/15 08:24:48 fetching corpus: 171, signal 56154/62689 (executing program) 2026/01/15 08:24:48 fetching corpus: 221, signal 61890/69352 (executing program) 2026/01/15 08:24:48 fetching corpus: 270, signal 65133/73557 (executing program) 2026/01/15 08:24:48 fetching corpus: 320, signal 68965/78161 (executing program) 2026/01/15 08:24:48 fetching corpus: 370, signal 74401/84167 (executing program) 2026/01/15 08:24:48 fetching corpus: 420, signal 78201/88627 (executing program) 2026/01/15 08:24:48 fetching corpus: 470, signal 81013/92114 (executing program) 2026/01/15 08:24:48 fetching corpus: 520, signal 83391/95141 (executing program) 2026/01/15 08:24:49 fetching corpus: 569, signal 87328/99426 (executing program) 2026/01/15 08:24:49 fetching corpus: 618, signal 89698/102341 (executing program) 2026/01/15 08:24:49 fetching corpus: 668, signal 92108/105219 (executing program) 2026/01/15 08:24:49 fetching corpus: 718, signal 94628/108143 (executing program) 2026/01/15 08:24:49 fetching corpus: 768, signal 98878/112336 (executing program) 2026/01/15 08:24:49 fetching corpus: 818, signal 101021/114791 (executing program) 2026/01/15 08:24:50 fetching corpus: 867, signal 103416/117438 (executing program) 2026/01/15 08:24:50 fetching corpus: 917, signal 104693/119124 (executing program) 2026/01/15 08:24:50 fetching corpus: 967, signal 106869/121444 (executing program) 2026/01/15 08:24:50 fetching corpus: 1017, signal 108376/123247 (executing program) 2026/01/15 08:24:50 fetching corpus: 1067, signal 109832/124993 (executing program) 2026/01/15 08:24:50 fetching corpus: 1117, signal 110895/126435 (executing program) 2026/01/15 08:24:50 fetching corpus: 1166, signal 112343/128062 (executing program) 2026/01/15 08:24:51 fetching corpus: 1215, signal 114242/129991 (executing program) 2026/01/15 08:24:51 fetching corpus: 1265, signal 115818/131681 (executing program) 2026/01/15 08:24:51 fetching corpus: 1313, signal 117107/133146 (executing program) 2026/01/15 08:24:51 fetching corpus: 1361, signal 118495/134622 (executing program) 2026/01/15 08:24:51 fetching corpus: 1411, signal 121169/136867 (executing program) 2026/01/15 08:24:51 fetching corpus: 1461, signal 123141/138622 (executing program) 2026/01/15 08:24:51 fetching corpus: 1511, signal 124456/139936 (executing program) 2026/01/15 08:24:51 fetching corpus: 1561, signal 126660/141730 (executing program) 2026/01/15 08:24:52 fetching corpus: 1611, signal 128414/143271 (executing program) 2026/01/15 08:24:52 fetching corpus: 1660, signal 130061/144665 (executing program) 2026/01/15 08:24:52 fetching corpus: 1708, signal 130950/145562 (executing program) 2026/01/15 08:24:52 fetching corpus: 1757, signal 131930/146529 (executing program) 2026/01/15 08:24:52 fetching corpus: 1807, signal 133641/147851 (executing program) 2026/01/15 08:24:52 fetching corpus: 1857, signal 134668/148758 (executing program) 2026/01/15 08:24:52 fetching corpus: 1907, signal 135394/149485 (executing program) 2026/01/15 08:24:52 fetching corpus: 1957, signal 136340/150279 (executing program) 2026/01/15 08:24:53 fetching corpus: 2007, signal 137746/151291 (executing program) 2026/01/15 08:24:53 fetching corpus: 2057, signal 138671/152050 (executing program) 2026/01/15 08:24:53 fetching corpus: 2107, signal 139593/152754 (executing program) 2026/01/15 08:24:53 fetching corpus: 2157, signal 140882/153646 (executing program) 2026/01/15 08:24:53 fetching corpus: 2207, signal 141980/154438 (executing program) 2026/01/15 08:24:53 fetching corpus: 2257, signal 143170/155228 (executing program) 2026/01/15 08:24:53 fetching corpus: 2307, signal 143992/155854 (executing program) 2026/01/15 08:24:54 fetching corpus: 2357, signal 144775/156404 (executing program) 2026/01/15 08:24:54 fetching corpus: 2407, signal 145881/157068 (executing program) 2026/01/15 08:24:54 fetching corpus: 2457, signal 146686/157558 (executing program) 2026/01/15 08:24:54 fetching corpus: 2507, signal 147593/158123 (executing program) 2026/01/15 08:24:54 fetching corpus: 2557, signal 148547/158660 (executing program) 2026/01/15 08:24:54 fetching corpus: 2606, signal 149630/159225 (executing program) 2026/01/15 08:24:54 fetching corpus: 2656, signal 150262/159627 (executing program) 2026/01/15 08:24:54 fetching corpus: 2706, signal 151257/160101 (executing program) 2026/01/15 08:24:55 fetching corpus: 2755, signal 151916/160464 (executing program) 2026/01/15 08:24:55 fetching corpus: 2805, signal 152799/160874 (executing program) 2026/01/15 08:24:55 fetching corpus: 2854, signal 153639/161292 (executing program) 2026/01/15 08:24:55 fetching corpus: 2902, signal 154486/161660 (executing program) 2026/01/15 08:24:55 fetching corpus: 2952, signal 155548/162068 (executing program) 2026/01/15 08:24:55 fetching corpus: 3002, signal 156430/162401 (executing program) 2026/01/15 08:24:55 fetching corpus: 3052, signal 157382/162714 (executing program) 2026/01/15 08:24:56 fetching corpus: 3102, signal 157969/162952 (executing program) 2026/01/15 08:24:56 fetching corpus: 3152, signal 158663/163186 (executing program) 2026/01/15 08:24:56 fetching corpus: 3202, signal 159466/163401 (executing program) 2026/01/15 08:24:56 fetching corpus: 3252, signal 160142/163576 (executing program) 2026/01/15 08:24:56 fetching corpus: 3299, signal 160879/163762 (executing program) 2026/01/15 08:24:56 fetching corpus: 3349, signal 161522/163893 (executing program) 2026/01/15 08:24:56 fetching corpus: 3399, signal 162164/164038 (executing program) 2026/01/15 08:24:56 fetching corpus: 3449, signal 162726/164150 (executing program) 2026/01/15 08:24:57 fetching corpus: 3499, signal 163189/164229 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164252 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164263 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164272 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164282 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164296 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164314 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164327 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164338 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164350 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164372 (executing program) 2026/01/15 08:24:57 fetching corpus: 3503, signal 163227/164373 (executing program) 2026/01/15 08:24:57 fetching corpus: 3504, signal 163228/164373 (executing program) 2026/01/15 08:24:57 fetching corpus: 3504, signal 163228/164373 (executing program) 2026/01/15 08:24:59 starting 8 fuzzer processes 08:24:59 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) pivot_root(0x0, 0x0) 08:24:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 08:24:59 executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) 08:24:59 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0403d15, 0x0) [ 72.250146] audit: type=1400 audit(1768465499.601:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:24:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x46) 08:24:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 08:24:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:24:59 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) [ 73.474800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.479734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.484592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.487113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.490169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.496674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.499204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.501068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.508107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.510674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.525807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.535419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.537841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.540979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.544587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.571555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.573428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.576550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.583264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.599750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.695597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.698541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.706522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.710377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.712444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.735426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.744607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.754594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.763951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.779913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.783978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.785401] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.787957] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.789772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.813593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.815566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.822515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.823934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.825883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.827949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.537852] Bluetooth: hci1: command tx timeout [ 75.537858] Bluetooth: hci0: command tx timeout [ 75.602310] Bluetooth: hci2: command tx timeout [ 75.665353] Bluetooth: hci3: command tx timeout [ 75.793591] Bluetooth: hci4: command tx timeout [ 75.858100] Bluetooth: hci5: command tx timeout [ 75.858153] Bluetooth: hci7: command tx timeout [ 75.859222] Bluetooth: hci6: command tx timeout [ 77.586294] Bluetooth: hci0: command tx timeout [ 77.586462] Bluetooth: hci1: command tx timeout [ 77.651090] Bluetooth: hci2: command tx timeout [ 77.714391] Bluetooth: hci3: command tx timeout [ 77.841337] Bluetooth: hci4: command tx timeout [ 77.905330] Bluetooth: hci6: command tx timeout [ 77.906348] Bluetooth: hci5: command tx timeout [ 77.906753] Bluetooth: hci7: command tx timeout [ 79.633413] Bluetooth: hci1: command tx timeout [ 79.633861] Bluetooth: hci0: command tx timeout [ 79.697381] Bluetooth: hci2: command tx timeout [ 79.761313] Bluetooth: hci3: command tx timeout [ 79.891182] Bluetooth: hci4: command tx timeout [ 79.953332] Bluetooth: hci7: command tx timeout [ 79.953733] Bluetooth: hci5: command tx timeout [ 79.954105] Bluetooth: hci6: command tx timeout [ 81.681615] Bluetooth: hci0: command tx timeout [ 81.682061] Bluetooth: hci1: command tx timeout [ 81.745323] Bluetooth: hci2: command tx timeout [ 81.810328] Bluetooth: hci3: command tx timeout [ 81.938090] Bluetooth: hci4: command tx timeout [ 82.001922] Bluetooth: hci6: command tx timeout [ 82.002359] Bluetooth: hci5: command tx timeout [ 82.002730] Bluetooth: hci7: command tx timeout [ 105.048951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.049688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.248599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.249239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.680425] audit: type=1400 audit(1768465533.021:8): avc: denied { open } for pid=3767 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 105.690396] audit: type=1400 audit(1768465533.022:9): avc: denied { kernel } for pid=3767 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 105.825704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.826338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.904985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.905663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 106.046664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.047266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 106.236610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.237236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 106.310214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.310837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 106.452002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.454245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:25:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x31, 0x75, 0x0, {0x26, "09ecc1f2ec95ad11d7b8376ef52c967c5e152255f037e52f63af82783ec80cbbfbc18e485924"}}, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)) 08:25:33 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) [ 106.716559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.717220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.856645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.857496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.952879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.954188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.025176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.025853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.083929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.084580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.148629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.149233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.233854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.234982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.281518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.282094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:25:34 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) 08:25:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 08:25:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x31, 0x75, 0x0, {0x26, "09ecc1f2ec95ad11d7b8376ef52c967c5e152255f037e52f63af82783ec80cbbfbc18e485924"}}, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)) 08:25:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x46) 08:25:34 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0403d15, 0x0) 08:25:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:25:34 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) pivot_root(0x0, 0x0) 08:25:34 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:34 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0403d15, 0x0) 08:25:34 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) pivot_root(0x0, 0x0) 08:25:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 08:25:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x46) 08:25:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x31, 0x75, 0x0, {0x26, "09ecc1f2ec95ad11d7b8376ef52c967c5e152255f037e52f63af82783ec80cbbfbc18e485924"}}, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)) 08:25:34 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) pivot_root(0x0, 0x0) 08:25:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 08:25:34 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 107.664465] [ 107.664661] ===================================== [ 107.665049] WARNING: bad unlock balance detected! [ 107.665444] 6.19.0-rc5-next-20260115 #1 Not tainted [ 107.665840] ------------------------------------- [ 107.666223] syz-executor.6/3939 is trying to release lock (rcu_read_lock) at: [ 107.667586] [] __wait_on_freeing_inode+0x105/0x350 [ 107.668859] but there are no more locks to release! [ 107.669906] [ 107.669906] other info that might help us debug this: [ 107.671259] 4 locks held by syz-executor.6/3939: [ 107.672567] #0: ffff88800f7243f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 107.674187] #1: ffff88801796a078 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 107.676227] #2: ffff88800f730950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 107.677331] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 107.678073] [ 107.678073] stack backtrace: [ 107.678437] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 107.678451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 107.678458] Call Trace: [ 107.678463] [ 107.678467] dump_stack_lvl+0xca/0x120 [ 107.678498] ? __wait_on_freeing_inode+0x105/0x350 [ 107.678512] print_unlock_imbalance_bug+0x118/0x130 [ 107.678527] ? __wait_on_freeing_inode+0x105/0x350 [ 107.678541] lock_release+0x1ee/0x270 [ 107.678556] __wait_on_freeing_inode+0x10a/0x350 [ 107.678570] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 107.678586] ? __pfx_var_wake_function+0x10/0x10 [ 107.678603] ? lock_is_held_type+0x9e/0x120 [ 107.678614] insert_inode_locked+0x25f/0x890 [ 107.678631] __ext4_new_inode+0x223d/0x4cd0 [ 107.678647] ? __pfx___ext4_new_inode+0x10/0x10 [ 107.678661] ? __pfx___dquot_initialize+0x10/0x10 [ 107.678679] ? __pfx_avc_has_perm+0x10/0x10 [ 107.678695] ext4_symlink+0x623/0xb40 [ 107.678713] ? __pfx_ext4_symlink+0x10/0x10 [ 107.678728] ? security_inode_permission+0x72/0xe0 [ 107.678741] vfs_symlink+0x44b/0x840 [ 107.678757] filename_symlinkat+0x158/0x440 [ 107.678771] ? __pfx_filename_symlinkat+0x10/0x10 [ 107.678784] ? strncpy_from_user+0x21b/0x2f0 [ 107.678801] __x64_sys_symlink+0x82/0x110 [ 107.678814] do_syscall_64+0xbf/0x420 [ 107.678827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.678839] RIP: 0033:0x7f0293347427 [ 107.678848] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 107.678860] RSP: 002b:00007ffe1c748aa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 107.678870] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0293347427 [ 107.678878] RDX: 00007ffe1c748b83 RSI: 00007f02933a202f RDI: 00007ffe1c748b70 [ 107.678885] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe1c748940 [ 107.678892] R10: 00007ffe1c7487f7 R11: 0000000000000202 R12: 0000000000000001 [ 107.678899] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe1c748b70 [ 107.678909] [ 107.694523] ------------[ cut here ]------------ [ 107.694905] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/3939 [ 107.709243] Modules linked in: [ 107.709618] CPU: 0 UID: 0 PID: 3939 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 107.724656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 107.745123] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 107.773078] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 107.792515] RSP: 0018:ffff8880485779a0 EFLAGS: 00010286 [ 107.792954] RAX: 00000000ffffffff RBX: ffff88804dc1d280 RCX: ffffffff815660f7 [ 107.907085] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88804dc1d67c [ 107.937526] RBP: ffff88804dc1d280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 107.938108] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804dc1d280 [ 107.969081] R13: 0000000000000001 R14: ffffffff85c0f9a0 R15: ffff88801ee545d0 [ 107.999018] FS: 00005555642f4400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 108.028341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.028820] CR2: 00005555642f4708 CR3: 0000000051606000 CR4: 0000000000350ef0 [ 108.058019] Call Trace: [ 108.090066] [ 108.123833] __wait_on_freeing_inode+0x10f/0x350 [ 108.146894] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 108.183128] ? __pfx_var_wake_function+0x10/0x10 [ 108.252192] ? lock_is_held_type+0x9e/0x120 [ 108.299109] insert_inode_locked+0x25f/0x890 [ 108.479190] __ext4_new_inode+0x223d/0x4cd0 [ 108.481752] ? __pfx___ext4_new_inode+0x10/0x10 [ 108.482965] ? __pfx___dquot_initialize+0x10/0x10 [ 108.483741] ? __pfx_avc_has_perm+0x10/0x10 [ 108.485516] ext4_symlink+0x623/0xb40 [ 108.487734] ? __pfx_ext4_symlink+0x10/0x10 [ 108.488753] ? security_inode_permission+0x72/0xe0 [ 108.490384] vfs_symlink+0x44b/0x840 [ 108.491649] filename_symlinkat+0x158/0x440 [ 108.492770] ? __pfx_filename_symlinkat+0x10/0x10 [ 108.493536] ? strncpy_from_user+0x21b/0x2f0 [ 108.495393] __x64_sys_symlink+0x82/0x110 [ 108.496091] do_syscall_64+0xbf/0x420 [ 108.496895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.497453] RIP: 0033:0x7f0293347427 [ 108.497817] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.499316] RSP: 002b:00007ffe1c748aa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 108.499920] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0293347427 [ 108.500522] RDX: 00007ffe1c748b83 RSI: 00007f02933a202f RDI: 00007ffe1c748b70 [ 108.501086] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe1c748940 [ 108.501691] R10: 00007ffe1c7487f7 R11: 0000000000000202 R12: 0000000000000001 [ 108.502250] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe1c748b70 [ 108.504860] [ 108.505051] irq event stamp: 767 [ 108.505375] hardirqs last enabled at (767): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 108.506181] hardirqs last disabled at (766): [] _raw_spin_lock_irqsave+0x53/0x60 [ 108.506986] softirqs last enabled at (762): [] kernel_fpu_end+0x59/0x70 [ 108.507743] softirqs last disabled at (760): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 108.508559] ---[ end trace 0000000000000000 ]--- 08:25:36 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) 08:25:36 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0403d15, 0x0) 08:25:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, &(0x7f00000000c0)=@qipcrtr, 0x0) 08:25:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x46) 08:25:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') write$P9_RREAD(r0, &(0x7f0000000000)={0x31, 0x75, 0x0, {0x26, "09ecc1f2ec95ad11d7b8376ef52c967c5e152255f037e52f63af82783ec80cbbfbc18e485924"}}, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)) 08:25:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:25:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:36 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x140241, 0x0) io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}]) 08:25:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000200), 0x0) 08:25:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146) 08:25:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:25:36 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x140241, 0x0) io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}]) 08:25:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000200), 0x0) 08:25:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:36 executing program 6: r0 = syz_io_uring_setup(0x3ed, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x24, 0x0, 0x0) 08:25:36 executing program 0: clock_gettime(0x5, &(0x7f0000000100)) 08:25:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146) 08:25:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000100)) 08:25:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000200), 0x0) 08:25:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146) 08:25:37 executing program 0: clock_gettime(0x5, &(0x7f0000000100)) 08:25:37 executing program 0: clock_gettime(0x5, &(0x7f0000000100)) 08:25:37 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x140241, 0x0) io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}]) 08:25:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0), &(0x7f0000000200), 0x0) 08:25:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:25:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146) 08:25:37 executing program 6: r0 = syz_io_uring_setup(0x3ed, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x24, 0x0, 0x0) 08:25:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) fchown(r0, 0xee00, 0xee00) 08:25:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000100)) 08:25:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) fchown(r0, 0xee00, 0xee00) 08:25:37 executing program 0: clock_gettime(0x5, &(0x7f0000000100)) 08:25:37 executing program 5: socket$inet6_udplite(0x10, 0x2, 0x88) 08:25:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x891d, &(0x7f0000006f00)={'wpan1\x00'}) 08:25:37 executing program 6: r0 = syz_io_uring_setup(0x3ed, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x24, 0x0, 0x0) 08:25:37 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x140241, 0x0) io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}]) 08:25:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) fchown(r0, 0xee00, 0xee00) 08:25:37 executing program 5: socket$inet6_udplite(0x10, 0x2, 0x88) 08:25:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000100)) 08:25:37 executing program 6: r0 = syz_io_uring_setup(0x3ed, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x24, 0x0, 0x0) 08:25:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x891d, &(0x7f0000006f00)={'wpan1\x00'}) 08:25:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) fchown(r0, 0xee00, 0xee00) 08:25:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) 08:25:37 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 08:25:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 5: socket$inet6_udplite(0x10, 0x2, 0x88) 08:25:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) 08:25:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x891d, &(0x7f0000006f00)={'wpan1\x00'}) 08:25:37 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 08:25:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000100)) 08:25:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x891d, &(0x7f0000006f00)={'wpan1\x00'}) 08:25:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) 08:25:37 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 08:25:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) 08:25:37 executing program 5: socket$inet6_udplite(0x10, 0x2, 0x88) 08:25:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001840), 0x800, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000001880)) 08:25:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) 08:25:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x42a00, 0x0) io_setup(0xe74, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)='I', 0x1}]) 08:25:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) 08:25:37 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 08:25:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) 08:25:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x28}], 0x1}, 0x0) [ 110.465064] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 08:25:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x42a00, 0x0) io_setup(0xe74, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)='I', 0x1}]) 08:25:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in=@empty}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) 08:25:37 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) 08:25:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x28}], 0x1}, 0x0) 08:25:37 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001840), 0x800, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000001880)) 08:25:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) 08:25:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) [ 110.600708] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 08:25:37 executing program 4: syz_mount_image$ext4(&(0x7f0000008300)='ext3\x00', &(0x7f0000008340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000008440)) 08:25:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x28}], 0x1}, 0x0) [ 110.616752] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 08:25:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x28}], 0x1}, 0x0) [ 110.632788] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 08:25:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) 08:25:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:25:38 executing program 4: syz_mount_image$ext4(&(0x7f0000008300)='ext3\x00', &(0x7f0000008340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000008440)) 08:25:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1f, 0x0, "f78fa1463aea272fa80db50d3d601e17e129805897b3b39af770574fdb16822f05370841fcb3037c95939b8cf8bfd62c52cf4e8019968e57b6858e058b13c838ed8660ff2d24c126d6ea5e738819aa41"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44894) 08:25:38 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001840), 0x800, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000001880)) [ 110.763388] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 110.764164] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 110.765237] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 110.776486] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 110.777076] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 08:25:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000080)) [ 110.828372] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 110.829240] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 110.836504] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 110.837029] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 110.842759] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 8 prio class 2 [ 110.843485] Buffer I/O error on dev sr0, logical block 0, async page read [ 110.844037] Buffer I/O error on dev sr0, logical block 1, async page read [ 110.848231] Buffer I/O error on dev sr0, logical block 2, async page read [ 110.848792] Buffer I/O error on dev sr0, logical block 3, async page read [ 110.849820] Buffer I/O error on dev sr0, logical block 4, async page read [ 110.850810] Buffer I/O error on dev sr0, logical block 5, async page read [ 110.853379] Buffer I/O error on dev sr0, logical block 6, async page read [ 110.853936] Buffer I/O error on dev sr0, logical block 7, async page read 08:25:38 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001840), 0x800, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000001880)) 08:25:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000080)) 08:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2e, 0x0, &(0x7f0000000c40)) 08:25:38 executing program 6: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 08:25:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x42a00, 0x0) io_setup(0xe74, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)='I', 0x1}]) 08:25:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:25:38 executing program 4: syz_mount_image$ext4(&(0x7f0000008300)='ext3\x00', &(0x7f0000008340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000008440)) 08:25:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080), 0x4) 08:25:38 executing program 6: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 08:25:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:25:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000080)) 08:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2e, 0x0, &(0x7f0000000c40)) 08:25:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:25:38 executing program 4: syz_mount_image$ext4(&(0x7f0000008300)='ext3\x00', &(0x7f0000008340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000008440)) 08:25:38 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000080)) 08:25:38 executing program 4: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 111.156331] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 111.157104] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 111.157675] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 111.158195] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 111.158809] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 111.179596] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 111.180335] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 111.180861] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 111.181516] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 111.182098] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 8 prio class 2 [ 111.182854] Buffer I/O error on dev sr0, logical block 0, async page read [ 111.183456] Buffer I/O error on dev sr0, logical block 1, async page read 08:25:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer:', @ANYRESOCT]) 08:25:38 executing program 6: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 111.245968] tmpfs: Bad value for 'mpol' [ 111.247153] tmpfs: Bad value for 'mpol' 08:25:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080), 0x4) 08:25:38 executing program 4: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 08:25:38 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2e, 0x0, &(0x7f0000000c40)) 08:25:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x42a00, 0x0) io_setup(0xe74, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)='I', 0x1}]) 08:25:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000001f00)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000021c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x2, 0x0) 08:25:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer:', @ANYRESOCT]) [ 111.296221] tmpfs: Bad value for 'mpol' 08:25:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000001f00)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000021c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x2, 0x0) 08:25:38 executing program 6: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 08:25:38 executing program 4: mlock(&(0x7f0000870000/0x2000)=nil, 0x2000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 08:25:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2e, 0x0, &(0x7f0000000c40)) 08:25:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer:', @ANYRESOCT]) [ 111.345724] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 111.347174] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 111.357329] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 111.357869] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 111.364574] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 111.365509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.365980] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.366716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.367144] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.367982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.368437] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.369160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.369636] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.370360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.370799] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.371652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.372117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 111.373208] tmpfs: Bad value for 'mpol' [ 111.373689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:25:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080), 0x4) 08:25:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000001f00)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000021c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x2, 0x0) 08:25:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f0000000040)) 08:25:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer:', @ANYRESOCT]) [ 111.426206] tmpfs: Bad value for 'mpol' 08:25:38 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000001f00)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000021c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x2, 0x0) 08:25:38 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b1000", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10000000, {0x0, 0x6, "825915", 0x0, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [@routing]}}}}}}}, 0x0) 08:25:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f0000000040)) 08:25:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080), 0x4) 08:25:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4d, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00', @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x0, @in=@local}}, 0xe8) 08:25:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 08:25:38 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:38 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) 08:25:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33b85e96cf85dbb6ca34eac707f811f253ebea364c3daab41c8f901cd5829a50567303d758e30144185ef79ca199cc827a823623011c39f0ca8f4e3f1f27a965", "20796ace1289e4d249d3083e300ae920e30453383610db0417767fecc49663e0c5df068fa754b3403ef9a20d26ba905c7589bc456e5b33490507088d678b263c", "9ebf4e337d71c315b819f01bcd69aea149d2ad4c460f81177ac96030c649a9a8"}) 08:25:39 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 08:25:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33b85e96cf85dbb6ca34eac707f811f253ebea364c3daab41c8f901cd5829a50567303d758e30144185ef79ca199cc827a823623011c39f0ca8f4e3f1f27a965", "20796ace1289e4d249d3083e300ae920e30453383610db0417767fecc49663e0c5df068fa754b3403ef9a20d26ba905c7589bc456e5b33490507088d678b263c", "9ebf4e337d71c315b819f01bcd69aea149d2ad4c460f81177ac96030c649a9a8"}) 08:25:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4d, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00', @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x0, @in=@local}}, 0xe8) 08:25:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) 08:25:39 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:39 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 08:25:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f0000000040)) 08:25:39 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 08:25:39 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:39 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 08:25:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4d, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00', @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x0, @in=@local}}, 0xe8) 08:25:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f0000000040)) 08:25:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) 08:25:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33b85e96cf85dbb6ca34eac707f811f253ebea364c3daab41c8f901cd5829a50567303d758e30144185ef79ca199cc827a823623011c39f0ca8f4e3f1f27a965", "20796ace1289e4d249d3083e300ae920e30453383610db0417767fecc49663e0c5df068fa754b3403ef9a20d26ba905c7589bc456e5b33490507088d678b263c", "9ebf4e337d71c315b819f01bcd69aea149d2ad4c460f81177ac96030c649a9a8"}) 08:25:39 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 08:25:39 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4d, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00', @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x0, @in=@local}}, 0xe8) 08:25:39 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 08:25:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x14) 08:25:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33b85e96cf85dbb6ca34eac707f811f253ebea364c3daab41c8f901cd5829a50567303d758e30144185ef79ca199cc827a823623011c39f0ca8f4e3f1f27a965", "20796ace1289e4d249d3083e300ae920e30453383610db0417767fecc49663e0c5df068fa754b3403ef9a20d26ba905c7589bc456e5b33490507088d678b263c", "9ebf4e337d71c315b819f01bcd69aea149d2ad4c460f81177ac96030c649a9a8"}) 08:25:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) 08:25:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) 08:25:39 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 08:25:39 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043eaf1913"], 0x1b2) 08:25:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x14) [ 111.958327] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 111.958352] Bluetooth: hci7: unexpected subevent 0x19 length: 430 > 28 [ 111.959452] Bluetooth: hci7: Unable to find connection with handle 0x0000 [ 111.960043] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260 [ 111.960054] Bluetooth: hci7: unexpected subevent 0x19 length: 430 > 28 [ 111.961136] Bluetooth: hci7: Unable to find connection with handle 0x0000 08:25:39 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) 08:25:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:25:39 executing program 5: mlockall(0x3) 08:25:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:25:39 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01]) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 08:25:39 executing program 2: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:25:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:25:40 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x4, 0x12}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "388a57", 0x0, "3856f7"}}}}}}, 0x0) 08:25:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x8) r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)='B', 0x1}, {0x0}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f00000015c0)}, {0x0, 0xfffffdf8}], 0x9, 0x15, 0x0) 08:25:40 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) 08:25:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x14) 08:25:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01]) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 08:25:40 executing program 5: mlockall(0x3) 08:25:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:25:40 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x4, 0x12}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "388a57", 0x0, "3856f7"}}}}}}, 0x0) 08:25:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) 08:25:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01]) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 08:25:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x8) r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)='B', 0x1}, {0x0}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f00000015c0)}, {0x0, 0xfffffdf8}], 0x9, 0x15, 0x0) 08:25:40 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x14) 08:25:40 executing program 5: mlockall(0x3) 08:25:41 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:41 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x4, 0x12}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "388a57", 0x0, "3856f7"}}}}}}, 0x0) 08:25:41 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:41 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x4, 0x12}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "388a57", 0x0, "3856f7"}}}}}}, 0x0) 08:25:41 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01]) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 08:25:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) 08:25:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x8) r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)='B', 0x1}, {0x0}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f00000015c0)}, {0x0, 0xfffffdf8}], 0x9, 0x15, 0x0) 08:25:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) 08:25:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x8) r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)='B', 0x1}, {0x0}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f00000015c0)}, {0x0, 0xfffffdf8}], 0x9, 0x15, 0x0) 08:25:41 executing program 5: mlockall(0x3) 08:25:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000bc0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 08:25:41 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000bc0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 08:25:41 executing program 1: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) 08:25:41 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:42 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:42 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:42 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000bc0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 08:25:42 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) 08:25:42 executing program 1: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000bc0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 08:25:42 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) 08:25:42 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:42 executing program 1: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:42 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:42 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:42 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:42 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:43 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:43 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:43 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:43 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:43 executing program 1: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:43 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:43 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:43 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100002901000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000067aca3708e32fc44c7dfe09457b194b52d7ffebf8b622116d0dc3cc3393b5363cba82239ca8877830c3d189fc3a199362798a48be0a7482fe7f922e97a94bd3f8ea8706f45ae00000000000000bc8a13bacc3c18ac6b2814bc528df5ce6f6ec6d61f58fc90fb43fb1e6e4e5d9833aa68f0f638969f05"], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:25:43 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 08:25:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) 08:25:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@getsadinfo={0x20, 0x23, 0x1, 0x0, 0x0, 0x0, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x20}}, 0x0) 08:25:43 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 116.523253] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 116.523253] program syz-executor.3 not setting count and/or reply_len properly [ 116.537337] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 116.537337] program syz-executor.3 not setting count and/or reply_len properly 08:25:43 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:25:43 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8000, 0x80000000, 0x5}) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f0000001200)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) semget$private(0x0, 0x1, 0x38) r2 = epoll_create1(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:25:43 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:25:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) [ 116.626952] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 116.626952] program syz-executor.3 not setting count and/or reply_len properly 08:25:44 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:25:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) 08:25:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@getsadinfo={0x20, 0x23, 0x1, 0x0, 0x0, 0x0, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x20}}, 0x0) 08:25:44 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:25:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x50c}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:25:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) [ 117.276795] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 117.276795] program syz-executor.6 not setting count and/or reply_len properly [ 117.284063] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 117.284063] program syz-executor.3 not setting count and/or reply_len properly 08:25:44 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace(0x20, r0) 08:25:44 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:25:44 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) sendfile(r0, r2, 0x0, 0xfdef) 08:25:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) 08:25:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x50c}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:25:44 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace(0x20, r0) 08:25:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) 08:25:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@getsadinfo={0x20, 0x23, 0x1, 0x0, 0x0, 0x0, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x20}}, 0x0) 08:25:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) [ 117.483975] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 117.483975] program syz-executor.3 not setting count and/or reply_len properly [ 117.527375] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 117.527375] program syz-executor.6 not setting count and/or reply_len properly 08:25:44 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 117.536169] Direct I/O collision with buffered writes! File: syzkaller-testdir012100924/syzkaller.MbkG4K/23/file0 Comm: syz-executor.7 08:25:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x50c}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:25:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) VM DIAGNOSIS: 08:25:35 Registers: info registers vcpu 0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888048577488 R8 =0000000000000000 R9 =ffffed10013c6046 R10=0000000000000072 R11=000000006f6c2034 R12=0000000000000072 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555642f4400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555642f4708 CR3=0000000051606000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a50fb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110034a1f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a50fb78 RIP=ffffffff84d1a2df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555577605400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557760ec58 CR3=000000000eaf3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000