f2f4c028feec0cec63f6100e93b01308671bf7a428adef20be5cb476fdded5eb166a501d112a56ab247f12bd787d84e98386d95456b1698d38f25decdb18d4d763ab9765d09cf49daa7a5fb907473e22c7a989290001000034405eae2d972b29a3c730a3e234f79c07e4d33915c2c73b8cf7f1ee0092d96d8ca254d4a372b7c02a039b95db2bea373663566507b71de24a00000000000000000000f5ebfa95990cab148f5925e5e24662ba22e40868c0f27e2a82292685573d68280c1c7d7cbdbfe1b072c661b65aac18fbd14a9086e7cf6e26c3894d4a458ef6dd77cf12095b63c8d2416a5a70244acea4f981fe8655390a643ed84f44d35d0e21b5f77a653e895b601207796179c05848544dce6ff017d43bc190f10cdd7ae239ca9a4c5c"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000500)=0x80000001) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9, 0x1, 0x55, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x8000, 0x1, 0x3b68, 0x1000}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x1, 0x6, @multicast}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip6tnl0\x00'}) close(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)=ANY=[@ANYBLOB="012020093810c3f5f69f4f24e84beed28d7091cce6cf5c6ec7f46c994c31b5ff9a4035d5e1dacb6d59cfb51a01db85f3ad62c7ac9824f06c7d90edf13ed3088fae3a2810681b350a392f96dc604781a2c8b84537c332e2c32ca8de925e18dc8fa06b55ed2232f3daf64ecc4397620068668ff3f08d96dd9c4edcd58f909e85d515760339f108f6762bbb34e1103005ea6f256687476cff6b70718754095c5db4e96726cc808da2161936eb9b866277896c1b3a229cf450379af0c0b9030531c047afe464ff162eb4aa7b7e9ab325a37986e8b8f6c4396970a3a858540728f4d19172cf29986ce2fa955ed652633551ed880fca", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x7}, 0x4) 18:48:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xe, 0x0, &(0x7f0000004640)) 18:48:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x22140, 0x180) ppoll(&(0x7f0000000040)=[{r1, 0x90}, {r1, 0x6281}, {r0, 0xe200}, {r0, 0x4650}], 0x4, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x100]}, 0x8) listen(r1, 0x8) 18:48:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) shmget$private(0x0, 0x4000, 0x40, &(0x7f000086f000/0x4000)=nil) 18:48:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x20000, 0x0) 18:48:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xf, 0x0, &(0x7f0000004640)) [ 1652.094188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1652.094713] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1652.095412] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1652.096050] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1652.096723] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1652.097392] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1652.098032] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:48:42 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:48:52 executing program 2: mlockall(0x3) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) pread64(r0, &(0x7f0000000040)=""/7, 0x7, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, 0x0) shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x1000) 18:48:52 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x81}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x44, 0x5, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb675, 0x1, @perf_config_ext={0x0, 0x6}, 0x61, 0xe1e, 0x800, 0x1, 0x401, 0x5, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x0) mlockall(0x2) 18:48:52 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'bond_slave_0\x00'}) close(r0) 18:48:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock2(&(0x7f0000871000/0x5000)=nil, 0x5000, 0x0) 18:48:52 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x40000, 0x0) 18:48:52 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) dup3(r0, r1, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3d7d9df5, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="c814091e8d24e0ede74ec24f8a42fb9897847283cef5dff585848093158ac400aa0812b868e4faaab6b2bafb7cbab4bcafc68f02dcd462081975fc81564ec69a", 0x40, 0x1}], 0x80000, &(0x7f0000000100)={[{}, {'&-\\:)(\xb1)]'}, {'}^@\x87-)*+-'}, {'{+'}, {'\\'}, {'{\v*]&\\-\'@&}@@!]'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}]}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 18:48:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:48:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='macvtap0\x00') r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x1, 0x888, 0x15, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd1a, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0xffffffffffffe374, 0x800, 0x0, 0xc67, 0x578ff2b5, 0x1ff, 0x0, 0x1f, 0x0, 0xd35}, r1, 0x8, 0xffffffffffffffff, 0x3) r2 = getpid() r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) close(r4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x154, r3, 0x215fb5f1984c965c, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x800}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a685103}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xf5, 0x2, 0x7, 0x5, 0x0, 0x55, 0x20002, 0xcc3344cdc52cbdc4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x40, 0x6, 0x3fc, 0x7, 0x7, 0x800, 0x6, 0x0, 0x3ff}, r2, 0x6, 0xffffffffffffffff, 0x8) 18:48:52 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x4000081) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) [ 1661.803245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1661.804554] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1661.806493] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1661.808209] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1661.809650] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1661.811025] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1661.812399] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:48:52 executing program 1: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/181) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:48:52 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x48, &(0x7f0000000000)=0x0) sendfile(r0, r0, &(0x7f0000000040)=0x9, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='#@+&\xe3\'\',*[{\x00') ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x8, 0x5, {0xfff, @struct={0x7, 0x9}, 0x0, 0x7fff, 0x4aa9, 0x9, 0x1400000000000, 0x10001, 0x484, @struct={0x1, 0x4}, 0x3, 0x5, [0x7, 0x5, 0x5, 0x9, 0x9a8, 0xf]}, {0x7, @struct={0x6, 0x5}, 0x0, 0x6, 0x40, 0x401, 0x4, 0x1000, 0x50, @usage=0x1, 0x3, 0xffff, [0x5, 0x6f, 0x8, 0x1, 0xfffffffffffffff8, 0x5]}, {0x7, @usage=0x300000000000, 0x0, 0x8000, 0x351, 0x1, 0x81, 0x8a, 0x443, @struct={0x22, 0x3}, 0x48e, 0x5, [0x6, 0x10001, 0x81, 0x0, 0x7, 0x5]}, {0x5, 0xfffffffffffffff9, 0xac}}) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) readahead(0xffffffffffffffff, 0x7, 0x8) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x24000, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x6611, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000c80), 0xffffffff, 0x80000) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000d00)={0x54, 0x7fff, 0x4374, {0x6928, 0x3}, {0x1, 0x5}, @period={0x59, 0x7f, 0x400, 0x5, 0x101, {0x1, 0x9, 0x0, 0x40}, 0x0, &(0x7f0000000cc0)}}) io_submit(r1, 0x3, &(0x7f0000000bc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000000c0)="a091d3763035a524cb", 0x9, 0x200000000, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x7a, r3, &(0x7f0000000140)="f83177430a31917b1553d475b282135f69aa2aba82f9cbffda6a1c560618b26e8b8acf65819af9046299f013060bb5b57d6fb116faf6575eabab0ec49c0f2f049334b1d64e96398412559ebad3c3234d7cffa31059568aff0cf09fecdd6ebf7e077348caa704d6a0e1b72663b9a3b14411c1c20a5f150fdf4142d1383d02aab1ff53ae09f6bcd6a9d0fd0757bf7bc2a10afa5d9f3427b8cbada277746bf9a79b989e3bf6a96fb9aaaccf3a490ddae2c88c3de366540fb2c0a4747aa162bb22571c83898237fecfc7313ff3f4397fbce750d2801339c3be597140ff32d986a09dbb549fb59e472dcd2fee", 0xea, 0x80000000}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x81, r4, &(0x7f00000002c0)="390d674cffbf40646fa49de55295231eb8e4f524f97dbbed4f341ddd48a0dcb7918cb777c6eb42eab9013e6dc50bbbe5de272082971c924b6b6329ebc192f0", 0x3f, 0x1, 0x0, 0x1, r5}]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000007c0)={r2, 0xcc58, 0x10001, 0x1}) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000c00)={0x5a81, 0x7, 0x9, 0x7}) mlock2(&(0x7f0000873000/0x1000)=nil, 0x1000, 0x1) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000c40)=[0x0, 0x6]) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:48:52 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@local]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) dup2(r0, r1) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/40, 0x28}], 0x2, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000340), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/158, 0x9e}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x70}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/137, 0x89}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/38, 0x26}], 0x6, &(0x7f0000001b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x3, 0x60, &(0x7f0000001c80)={0x0, 0x989680}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xca, 0x81, 0xc7, 0x7, 0x0, 0x8, 0x41, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x10c42, 0x7fffffff, 0x10001, 0x4, 0x2, 0x101, 0x81, 0x0, 0x7d36c1cd, 0x0, 0x200}, r4, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ftruncate(r3, 0x101) 18:48:52 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x60000, 0x0) 18:48:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "9d5dcea72d2c098328d4e317e84cb44bdf528b8dd758812010fc0fd858ee92d4fd9d910541256446c5ede5cf0a76803e5abfe2ea5d702dbeedc1e6c1b3847b6c8c4979ae6943e83fd2066edec7c39a66af1d591f0b9e34b95a972990a4be65670871908fd247f00f400e2ff8ee577ca91583a5895cf0e9f53051d83a3fbe13f2636e5006b53c7d578cc2fb58261e56a91ea4e1243b44ea91e650d5035d26d8d069a72c"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "972d11cce6896dd56f12abb9b16604e6b3265a702628aec7478c80"}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000001}, 0x11) 18:48:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x9, 0x1}, 0xe) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) sendfile(r0, r3, 0x0, 0xd03d) 18:48:52 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x3, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x4, 0x3, 0xfffffffffffffffa}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) shutdown(r1, 0x1) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x2, @any, 0x9, 0x2}, 0xe) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffff9, 0x8e01) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x7, @local, 0x3}, 0x1c) bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x5, @any, 0x6, 0x2}, 0xe) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) [ 1662.163270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1662.163759] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1662.164596] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1662.165424] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1662.166043] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1662.166866] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1662.167692] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:01 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x80000, 0x0) 18:49:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x5, 0x5, 0x6, 0x7, 0x0, 0x10001, 0x40, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x40008, 0x30b, 0xffffffff, 0x1, 0x7, 0x7fff, 0x5, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x4, r1, 0x0) 18:49:01 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000040)=0x6, 0x4, 0x5) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffff8, 0x2}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0xa5d4, 0x0, 'client0\x00', 0x1, "848ff990feec26ff", "ef960873eada74696584480fbebaf70d92eafbc2261b882df0d0be9d6faf6058", 0x0, 0x4}) 18:49:01 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0xfda8, 0xeb, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:49:01 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x81}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x44, 0x5, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb675, 0x1, @perf_config_ext={0x0, 0x6}, 0x61, 0xe1e, 0x800, 0x1, 0x401, 0x5, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x0) mlockall(0x2) 18:49:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x3b1022, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0xe6, &(0x7f0000000100)=0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x1) r4 = getpgid(0xffffffffffffffff) syz_open_procfs(r4, &(0x7f00000001c0)='net/mcfilter6\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='caif0\x00') r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x6611, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0xcfc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0xe5dfb2110ea04cd4}, 0xe) r6 = io_uring_setup(0x407f, &(0x7f0000000480)={0x0, 0x66ee, 0x0, 0x2, 0x3af, 0x0, r5}) lseek(r6, 0x3, 0x0) 18:49:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x101, @none, 0x83}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:49:01 executing program 2: mlockall(0x3) mlockall(0x1) syz_read_part_table(0x200, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000000)="e41fce760c6ddc2593d6d27efc075cef28ac16ae4dfc66bddba217df3940732ad5de277453d9", 0x26, 0xffffffffffffff80}, {&(0x7f0000000040)="0bef3096f07e8873eeda49bdf5c46534e1edff026a11f659c9300697bc5f6d798257488f30593bfdd19c26717b1cfc1ab6a4e4c04e729431545da97e18924e6c0ad2fd5f73f74fdaaa3e1654cb6a048c82959ee11bee", 0x56, 0xa6d}, {&(0x7f00000000c0)="7b32ad2896ee3199a94b854c1d465477c093d54f6f3a262dc4cd9ff7e681bfa0bd6acacc1e05c25be8edef95f11b48eefe9499015a509211b5bfdcf0c363aa4bd8e6f8faa7bae683a7d60770c576944637e3f852e3cbe98fab99a6235671a3", 0x5f, 0x8}, {&(0x7f00000002c0)="f0e24221cac803609ccfc1cfd8137e4ab3da98ff95f9b58e8c31b7585ada382673af029603580329a7856f9af03fc310f3895eb4c9a4b9abce5a752092a06e748bfdc70a76fa502845921e0eda98582289341f649e86a9da7b2019a42fd9e4448051d9f3df575d655e4eed8799c1b0367d7d18039c9d832b7e3470345e94a9074a3cd71a5e3b8b6dcd4954329122135f966acd4e0fcbcfce158496ffca57149e1174a48fe7b05cd7dd71a22d2097dd00e2ef183871ea29f70d11a71371608c9103a79033c0cc69d1e7a37b30a0845de502eced5027abeab41ff92ce989f5b6", 0xdf, 0xfeffffffffffffff}, {&(0x7f0000000140)="d6dcf755541399a8b26df6de897e1e894b8f5dc3d93985c981a19bd38545170b05903502f672950135690af8daa4ab26a40fc95160c8ebbd50f018feb38c3ea9ed072512c3b68bd3bfd220c2570539b2d85ef1e73a7381bd59fa3cc8fb66c13f7f89feb96b1e9397eb2eb1761da51ed8dffdd89b5ed488eb271ffcf92a3ad92a4b84fabf4c97e14aa0b2fcc9547320ad68710c5a14ca1c8c91538a7e142cef7854ff5dc499cd24da29a5a67d822e63e0c626a163df070c170f0f5e83ba477f745c81e25e4ff99a3d4d9cd0dd18370e55b49d6ffbc8fea219f97aee4cfe4589a1840b90", 0xe3, 0xbbeb}, {&(0x7f00000003c0)="b828e9771f0db8b99ac15362ba706ca92b037605073fc321eb44f9f6b29f530de9d49d81aa52cb74a53a1726f9f4a593f419d974d5f0e1e7141d21a42ad0f2eae39db5df0b551b9ba16fe67ae95bd1ce8303840a6e183ee761ac6d876e9616b729da2d18865a85f7141f7dc71c5c997163743e462c3b3c6d04a4d0b891a79649758c0e4d9e834f6be9ebac893f261bac8ccf34b6", 0x94, 0x8000}, {&(0x7f0000000480)="31b5", 0x2, 0xffffffffffffffb0}]) mlockall(0x2) shmat(0xffffffffffffffff, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) mlockall(0x3) shmat(r0, &(0x7f0000f22000/0x1000)=nil, 0x8000) [ 1671.385906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1671.386442] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1671.387142] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1671.387785] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1671.388445] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1671.389123] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1671.389756] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:01 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x20402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0x4, 0x4, 0x5, 0x13c99f50}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:49:01 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xa0000, 0x0) 18:49:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x94, 0xea, 0x14, 0x0, 0x7, 0xd3f78cc8f581ee51, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x5}, 0x46, 0xa, 0x97f, 0x6, 0xfffffffffffff40c, 0x3, 0x1ff, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x20000000, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:01 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'veth1_macvtap\x00', 0x7}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x105800, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xff, 0x4, 0x3, 0x0, 0x800, 0x50944, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x800, 0x1f, 0x400, 0x2, 0x3, 0x9, 0x0, 0x0, 0xfffeffff, 0x0, 0x80000000}, r1, 0xc, r2, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x6, 0x45, 0x5) 18:49:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a) 18:49:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) [ 1671.664981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1671.665514] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1671.666224] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1671.666853] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1671.667501] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1671.668132] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1671.668738] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:02 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ec174408d0000a6e8c8f5b96ba012b0d23834b50f47476edaeb1ff964b113cf65f0be4ab19636645f0ae3094e59e50bfee32de57697fa08a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e000000"], 0x52) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) close(r0) 18:49:12 executing program 2: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd8, 0xe1, "e6a3c730977b1f017f4021d521f03852742be9", 0x5818, 0x401}) mlockall(0xf19cd01ee2665020) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = shmget(0x2, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f000049d000/0x1000)=nil, 0x3000) 18:49:12 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x81}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x44, 0x5, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb675, 0x1, @perf_config_ext={0x0, 0x6}, 0x61, 0xe1e, 0x800, 0x1, 0x401, 0x5, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x0) mlockall(0x2) 18:49:12 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:12 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xff]}, 0x8, 0x80800) write$evdev(r0, &(0x7f00000001c0)=[{{0x0, 0x2710}, 0x1, 0x101, 0x7fff}], 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/225, 0xe1, 0x40010002, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010100}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x400, @none, 0x1000, 0x2}, 0xe) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:49:12 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xc0000, 0x0) 18:49:12 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='sessionid\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0xd1, 0x4, 0x8, 0x0, 0x7fffffff, 0x0, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x7f, 0x2, 0x5, 0x6, 0xe88, 0x4, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0xa) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:49:12 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bd8b44343"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) 18:49:12 executing program 3: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x20040001) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x4143, 0x8000, 0x7) 18:49:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2640}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) [ 1681.896583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1681.897188] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1681.897876] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1681.898557] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1681.899229] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1681.899877] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1681.900542] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xe) listen(r0, 0x7b) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:49:12 executing program 2: mlockall(0x3) mlockall(0x3) r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000686000/0x1000)=nil) shmat(r0, &(0x7f0000686000/0x1000)=nil, 0x5000) 18:49:12 executing program 6: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x21, @empty, 0x4e21, 0x1, 'nq\x00', 0x2, 0x8, 0x4b}, {@rand_addr=0x64010101, 0x4e21, 0x10000, 0x0, 0x7fff, 0x4}}, 0x44) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'vlan1\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:12 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x2, 0x1f, 0x80, 0x0, 0x800, 0x60420, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x1010, 0x280000000000000, 0x9, 0xd, 0x3, 0x1, 0x4, 0x0, 0xc1a, 0x0, 0x3f}, r0, 0x0, r1, 0xa) mlock(&(0x7f0000871000/0x4000)=nil, 0x4000) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:12 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xe0000, 0x0) 18:49:12 executing program 6: pause() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:12 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x80002, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) recvmmsg$unix(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f00000003c0)=""/88, 0x58}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x20}}], 0x1, 0x2, &(0x7f0000000540)={0x0, 0x3938700}) 18:49:12 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80c00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'team0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) clock_gettime(0x0, &(0x7f0000001680)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000001600)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000010000000100000000000000493251e6afaf29ffc40a7e51de03ed9fcde3c100b8aece0f74af571e1d5b24e398bbf4145cc71110ca7b8212e404bcd192fd2d5709da45aabb38307b572571e2094900a919a695f6ae73bbb455aa5bcddf48f7aad3c6f76740166f9699350c2c1e40067ed8bb9d5169fa287ae8a6d2ecbd1ce4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x2, 0x22, &(0x7f00000016c0)={r3, r4+10000000}) close(r0) [ 1682.272948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1682.273621] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1682.274436] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1682.278194] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1682.278850] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1682.279524] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1682.280193] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:23 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00001e74608d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae32de576970308a41f1fd6c2cf1f7d4666d7035828c469c4b796fe69f1290bca329e3b00ffff000011fae4a9c00b70e9292c8d843e0000000000"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:49:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8001}, 0x0, 0x10001, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '$^\\\xc8-'}, {0x20, '%'}, {0x20, '\x7f)uz-{'}, {0x20, '$'}, {0x20, '(}@]]%\xf6]%\xea'}, {}, {0x20, '}+'}, {}], 0xa, "fec3018ef8cde553c75349a9ba6cc9a5f6d71e1635672c3d3004ad7ac8bc42604eb9d88a0e93664bd3a7dede849245ee6cbe8efc5d47c7e39a31f782fd1f3134931dcb5a7a884fa6dd6b51e2890d403264fb199c42ab3cf4301dc86b9aae2427f9fa75de19eb2b3d0b7c82a5731d6ade7b"}, 0x9d) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 18:49:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xaf, @none, 0x6, 0x1}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)=0xfffffffffffffe32) 18:49:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x100000, 0x0) 18:49:23 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:49:23 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x81}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x44, 0x5, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb675, 0x1, @perf_config_ext={0x0, 0x6}, 0x61, 0xe1e, 0x800, 0x1, 0x401, 0x5, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:49:23 executing program 2: mlockall(0x3) shmat(0x0, &(0x7f000064a000/0x3000)=nil, 0x5000) mlockall(0x6) mlockall(0x1) 18:49:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0xff, 0x4, 0x3, 0x0, 0x6, 0x180, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x1, 0x70217c16}, 0x80, 0x81, 0x7f, 0x5, 0x9, 0x5, 0x5, 0x0, 0x96, 0x0, 0x8}, r0, 0x7, r1, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:24 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4a, 0xfe, 0x4, 0x3d, 0x0, 0x3, 0x90000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240)}, 0x40, 0x854, 0x48d841c6, 0x0, 0x0, 0x8, 0x2, 0x0, 0x7fff}, 0xffffffffffffffff, 0xa, r0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000280), &(0x7f00000002c0)={[0xfffffffffffffffb]}, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r4 = epoll_create(0x45d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x8d}) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:24 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:24 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000840), 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x9, 0xbd, 0x50, 0x0, 0x6, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x1c158, 0x6, 0x8e123435, 0x8, 0x8, 0x3, 0x3, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r2, 0x9) clone3(&(0x7f00000003c0)={0x2000000, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x26}, &(0x7f0000000200)=""/30, 0x1e, &(0x7f0000000240)=""/79, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x40, 0x3, 0x81, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x4102, 0x1000, 0x4d, 0x9, 0x6, 0xffffffff, 0x6, 0x0, 0x8}, r3, 0x3, r2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) [ 1693.748934] Unsupported ieee802154 address type: 0 [ 1693.760051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1693.760553] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1693.761301] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1693.761938] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1693.762591] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1693.763245] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1693.763875] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:24 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) pkey_mprotect(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x1000002, 0xffffffffffffffff) mlock(&(0x7f0000871000/0x3000)=nil, 0x3000) 18:49:24 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b6021a84d92ef9dd35c3a7c27d8de5c79904305001e3879639203dcc57599e4d5a5a951fc98c89a24dcdfbcd5b52a8c90d99425f2d75a7a9c1a76380ea46d3588e515cf8c22365840b546662bebf2dc348cb16699cbca6b30ab96434b91c701ac4e4b0296c1bb7f25076cb2040000003c023657dd4997d8146a4ad8b00e4b4ba53b3ca5b1459b27c228d47204de650b51e741dadd91ead7560c6ff33b30"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00'}) close(r0) 18:49:24 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xe6ef7f, 0x0) 18:49:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) r2 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) poll(&(0x7f0000000100)=[{r1, 0x3a0}, {r2, 0x6552}], 0x2, 0x2) 18:49:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x400000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) r3 = getpid() process_vm_readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r1, 0x3, 0x1, 0x6}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xf0, 0x1, 0x46, 0x76, 0x0, 0x8, 0x8, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x5, @perf_bp={&(0x7f0000000140), 0x6}, 0x8321, 0xffffffffffffff00, 0x4, 0x5, 0x7ff, 0x22, 0x401, 0x0, 0x1}, r3, 0x7, r4, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x20, 0x9, 0x9, 0x0, 0x81, 0x44003, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x10001, 0x6, 0x80000001, 0x5, 0xffffffffffff0000, 0x3, 0x100, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xe, r1, 0x8) [ 1693.948426] Unsupported ieee802154 address type: 0 [ 1693.959717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1693.960230] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1693.960885] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1693.961571] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1693.962220] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1693.962846] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1693.963501] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:24 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000018000000005768df3347409765ac39f0cc4696e68aef0dad2b693901ac40a07b6e483625bcc3da8b7f8626c77846caf29d05fcc311cf0e36040bd152cab90a5293cd7dc32f41c7a8514e8ea167c2e71a31f9d8545519ac93db69946f3c9a2cffcadf953ff0d525c10a9791c31368115456da958f1fba2e0a2e7da42731d1b8a2c2027dd2ee14a94d0fb4e1541af482aa2b4bc812a12fd53d6c3a", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:49:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgroups(0x1, &(0x7f0000000340)=[r1]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:49:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xfffffffe}}, './file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000080)=ANY=[@ANYBLOB="3800000000000000010000000100000002000000ff0f00000200000000000000070000000000000018d900000000000000000000000000000000000000000000021400000000000000000000000000000500000000000000b300000000000000010000000000000000000000000000000000000000000000000800"/144]) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x742, @none, 0x4, 0x2}, 0xe) 18:49:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x100000000000, 0x1) 18:49:35 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xe6ff7f, 0x0) 18:49:35 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x81}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x44, 0x5, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb675, 0x1, @perf_config_ext={0x0, 0x6}, 0x61, 0xe1e, 0x800, 0x1, 0x401, 0x5, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:49:35 executing program 2: r0 = getpgrp(0x0) pidfd_open(r0, 0x0) mlockall(0x7) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x4000) mlock(&(0x7f00008d9000/0x2000)=nil, 0x2000) mlockall(0x1) 18:49:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) pwritev2(r1, &(0x7f0000003f80)=[{&(0x7f0000005680)="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", 0x1000}, {&(0x7f0000003b00)="696320cbed27332108737e602e00dd6963e2", 0x12}, {&(0x7f0000003ec0)="4b36d195e4f92b7b7056c988395dbd990994a5a9bb0a055d4f0f52f0f77649f3946f91535b7cac94835b50d38720f3f78d08155dfa53948c53cad9389be51163ec804b9026b9e7306c4e115b120603092eecfe970c18e44407a460b15bc38964e422a52b2380d0b8bfd8a7d079e89c2ad4230ac8b5f000487714fcd5383b572ced129178c0c77abe500747aa70f5043ae9732431dea572f244b6ca2206be8d2679dac6687cfa41e7c53175750bdfc9f063", 0xb1}], 0x3, 0x1000, 0x7f, 0x16) clock_gettime(0x0, &(0x7f0000003e40)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000003c80)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/210, 0xd2}], 0x4}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/165, 0xa5}], 0x4, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000016c0)=""/183, 0xb7}, {&(0x7f0000001780)=""/132, 0x84}, {&(0x7f0000001840)=""/108, 0x6c}, {&(0x7f00000018c0)=""/250, 0xfa}, {&(0x7f00000019c0)=""/155, 0x9b}, {&(0x7f0000001a80)=""/159, 0x9f}], 0x6, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001c00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001c80)=""/185, 0xb9}, {&(0x7f0000001d40)=""/102, 0x66}, {&(0x7f0000001dc0)=""/246, 0xf6}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/6, 0x6}, {&(0x7f0000001fc0)=""/245, 0xf5}, {&(0x7f00000020c0)=""/235, 0xeb}], 0x7, &(0x7f0000002240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000022c0), 0x6e, &(0x7f0000003480)=[{&(0x7f0000002340)=""/148, 0x94}, {&(0x7f0000002400)=""/124, 0x7c}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x3, &(0x7f00000034c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003500), 0x6e, &(0x7f0000003980)=[{&(0x7f0000003580)=""/210, 0xd2}, {&(0x7f0000003680)=""/169, 0xa9}, {&(0x7f0000003740)=""/108, 0x6c}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/189, 0xbd}, {&(0x7f0000003880)=""/21, 0x15}, {&(0x7f00000038c0)=""/144, 0x90}], 0x7, &(0x7f0000003a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003a80), 0x6e, &(0x7f0000003b00), 0x0, &(0x7f0000003b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}], 0x7, 0x0, &(0x7f0000003e80)={r2, r3+10000000}) 18:49:35 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x53ce}, @val={0x0, 0x80, 0x7, 0x639, 0x2, 0x1}, @llc={@snap={0x0, 0x0, 'pc', "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x61) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x1, 0x6, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:49:35 executing program 6: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x78, 0x3, 0x0, 0x0, 0x0, 0x0, 0x21208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xae2}, 0x0, 0x0, 0x200000}, r0, 0x9, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:35 executing program 0: r0 = perf_event_open(&(0x7f0000002180)={0x0, 0x80, 0x7a, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x1, 0x0, 0x0, 0x140000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, &(0x7f0000002140), 0x80, 0x0) open_by_handle_at(r0, &(0x7f0000002100)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x4, 0x4}, 0x2, 0xfffff898}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bind$bt_l2cap(r1, &(0x7f00000020c0)={0x1f, 0xfffc, @any, 0x8001, 0x2}, 0xe) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/18, 0x12}, {&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000240)=""/109, 0x6d}], 0x4, &(0x7f00000003c0)=""/254, 0xfe}, 0x4}, {{&(0x7f00000004c0)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)=""/222, 0xde}], 0x1, &(0x7f0000000640)=""/162, 0xa2}, 0x9e}, {{&(0x7f0000000700)=@ll, 0x80, &(0x7f0000001900)=[{&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/120, 0x78}], 0x3, &(0x7f0000001940)=""/155, 0x9b}, 0x6}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/217, 0xd9}, {&(0x7f0000001b00)=""/165, 0xa5}, {&(0x7f0000001bc0)=""/212, 0xd4}, {&(0x7f0000001cc0)=""/57, 0x39}, {&(0x7f0000001d00)=""/66, 0x42}, {&(0x7f0000001d80)=""/182, 0xb6}], 0x6, &(0x7f0000001ec0)=""/151, 0x97}, 0xea}], 0x4, 0x2102, &(0x7f0000002080)) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:49:35 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f00000013c0)=""/194, 0xc2}], 0x5, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001640)=""/182, 0xb6}], 0x1, &(0x7f0000006580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001780)=""/189, 0xbd}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x2, &(0x7f0000002880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/61, 0x3d}, {&(0x7f0000002900)=""/36, 0x24}, {&(0x7f0000002940)=""/255, 0xff}, {&(0x7f0000002a40)=""/86, 0x56}], 0x4, &(0x7f0000002b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002bc0), 0x0, &(0x7f0000002c00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/130, 0x82}, {&(0x7f0000004d40)=""/253, 0xfd}], 0x3}}, {{&(0x7f0000004e80)=@abs, 0x6e, &(0x7f00000062c0)=[{&(0x7f0000004f00)=""/93, 0x5d}, {&(0x7f0000004f80)=""/232, 0xe8}, {&(0x7f0000005080)=""/113, 0x71}, {&(0x7f0000005100)=""/47, 0x2f}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/182, 0xb6}, {&(0x7f0000006200)=""/179, 0xb3}], 0x7}}], 0x8, 0x100, &(0x7f0000006540)={0x77359400}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, r0, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) [ 1705.457872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.458874] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1705.460298] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1705.461575] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1705.462835] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1705.464136] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1705.465397] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:35 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3, 0x6c, 0x20, 0x20, 0x0, 0x1c, 0x8008, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x92, 0x2c}, 0x508b, 0x40, 0x5, 0x2, 0x6, 0x6, 0x3f, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0xe, r3, 0xb) 18:49:35 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x14840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'lo\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x0, 0x0, 0x32, 0x0, 0x3, 0x20104, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x8, 0x5, 0x101, 0x5, 0x10000, 0x400, 0x5, 0x0, 0x81, 0x0, 0x7}, r2, 0x1, r1, 0x1) close(r0) 18:49:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:49:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:48 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x340) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x101, 0x4, 0x6}) mlockall(0x3) shmat(0xffffffffffffffff, &(0x7f0000df5000/0x3000)=nil, 0x5000) 18:49:48 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:49:48 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3, 0x2, 0x1, 0x1, 0x0, 0x9, 0x100, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0xa40, 0x4, 0xffff, 0x7, 0x8, 0x6e, 0x5, 0x0, 0xc45, 0x0, 0x3}, 0xffffffffffffffff, 0x7, r4, 0x0) read(r0, &(0x7f0000000100)=""/122, 0x7a) 18:49:48 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xac993d4f34f94586}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4000000000, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) pwrite64(r0, &(0x7f0000000140)="6e279bb58fc6d27b41c468ca5d1c895f765252a0532f2c8e3b0e2485626f42c80d193d666a7b7b341723b1457dc78db6811008d33872376b24153f", 0x3b, 0xcc) 18:49:48 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xf0ff7f, 0x0) 18:49:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x401, @none, 0x800}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) [ 1717.893001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1717.894610] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1717.896270] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1717.897778] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1717.899044] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1717.900247] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1717.901535] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:49:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) mmap$binder(&(0x7f0000872000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) 18:49:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, 0x1, 0x5, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @multicast2, @private=0xa010101]}, 0x24) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/1, 0x1, 0x100, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) 18:49:48 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xfeff3f, 0x0) 18:49:48 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) r3 = gettid() r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc, &(0x7f0000000200)=[{&(0x7f00000003c0)={0x12dc, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x23, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x63, 0xf, 0x0, 0x1, [@generic="1e3f59f5109eca169b3d6611df60ca6108ea484767682e2165a55412bf07f0d1d894522a128cf835d754e986d9a8a80c4b4e625e80d832529e833dac8cb4c9582718d221f2899a2507581d", @generic="8f44e2cf4a028ed29c067bfd2fcf5376645c83c2"]}, @generic="e1d81ae62f45938d75e1b9b44d07f11f3440520e09d1124bd52062dc4ebabc52db995be467ee782ab94c823f0e804c0ab8c4fd353f0923f3dc7aeeaa546998f741b189075c841fb69f4885c96734956c54a379f71c0befe988336052a4", @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x90, 0x0, 0x0, @pid=r1}, @generic="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", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@remote}, @nested={0x1c7, 0x6e, 0x0, 0x1, [@generic="b26d89d49a67922170c6de4e2499924f52b5ac058834a3ef305d514e907ca15cd1123c2b4f394bcd039572a860cd7f584ac7cfb2", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x100}, @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="be9f8a863f4f0df28c793da16f1b903ce00f83f0c105f4ee8a717b494f7ca9684ed40cc1b61c999786bf6a5f4505a611e3599c0981ca2bcd756bfa0ea8d61ccab239e70dbde8761fa66e3f0ebec58fb8f3d79c8b30d71655f377b0618f4526b664204bbf88416d32414f280cb72bce6efc4f6c4314e29288c5dd2a04e54c29401a3bd97b027211c2463bdcd3f539ca60d5bac7393143395f04f97eeaa0a9fb59c9600cad08c645305fcec4d884195c826cc7df34b6c7c94a55c12056da82539c5be9b03a5120db3ebe132c2f9ad61208e910293a67993b57e3538cec55f85b", @generic="6890fdd60ea428ca6e10f8f631bf5512394fe5040561c80ba87219baed82870896c5fa6640c7bdb5e21d7210afc6feff87687ca07f496bd730a99656e241bbbb8e28db0d72130bd31d55181135819aeb053121d7308be6ea8d36997eea2a436748349486c2a6e6e77b49fccb8f86e637cbb952e1c3f257a73d7b4b720f8a33f68dd3ba0605a9fbda1e606686f006bc3bc8225ff9", @typed={0x8, 0x29, 0x0, 0x0, @uid=r2}]}]}, 0x12dc}, {&(0x7f0000000080)={0x40, 0x31, 0x10, 0x70bd29, 0x25dfdbfe, "", [@typed={0x2d, 0x50, 0x0, 0x0, @binary="ae82f1bd3d1f83a920acf3f6014568befe5ed6b3f004677516ebbce657972d302ee52dd740ec0a7030"}]}, 0x40}, {&(0x7f00000016c0)={0x11a0, 0x29, 0x200, 0x70bd27, 0x25dfdbff, "", [@generic="572e33b2228379a6b2a003e4c99902c7012040bdc5b954b64383da434908500172b4b996cffca53faa3602c6cff2723903409b906315509a767035613aa14a32dda7387d51c90a91bd99f28f504c77d87437acd6d0675b212e56c74fc7ed3406ee5bac1338118098fd5c6df2073f35f3c1c1c8a98d5ecc514291355b26fea4be3fd8948cf73523671058da", @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@local}, @nested={0x3e, 0x26, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @pid=r3}, @generic="1bcbe00bf364e1d75412160704238689492cc20399a8ed6ee0518651e9e309d474521b211dde45670254f6abe6927b152467"]}, @generic="fcdd1af817bbd6e0cf06028a5d00a9fc4e17a685b21c56ddce7590da6e8cbdda3509cd476bf5e192dbf88cc99b80922316af5780b3588d3929b984cdec4393789746976e41033dd9c37f4591e79397a56d7cb0e72bce1339837adf20ba8aae998720eaba50ebb8afd0a62c59a81af5644037379498a55e107b8230184f5dd940001600", @generic="4d537ad44a6a6169fac5edffa624f85fb6606f12983a7b4cf10c209d32a6785ac38b19b8db00e62572401e44104c1936df992793afec60cbfd", @generic="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"]}, 0x11a0}, {&(0x7f00000000c0)={0x20, 0x2e, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r4}]}, 0x20}, {&(0x7f0000000100)={0xd4, 0x23, 0x100, 0x70bd25, 0x25dfdbfd, "", [@generic="2a46a99caf128436997532870574db4c600918ee130b910e583b3a158750fb70a2ae2558b1bab8718a111bbb6f772a8bd990f15b64a6c5c3e4731f450acb13d10455336d12e8b0a7d4e2942530393eb14dfb79fc8fbe3ba247fe82fc97009dd334558900aac37ee29591a2e09f039520b11f0a218f2c8bf6a00fc9c00036f1ce32ae399123d56ebd18df38fb2c685f7bf1f5", @nested={0x2e, 0x35, 0x0, 0x1, [@generic="6f0a04f8525a1371b70f7f5efcf548b5bcee75b1cef62766342a9e870bd5eafab607c360c52fe6e2d803"]}]}, 0xd4}, {&(0x7f0000002880)={0x36c, 0x22, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@generic="9870a76dbba6d1c10fc898ee0911bf96927d18e1b99dee22fd49fcefb90021602c743e8893028c0a2f2ec2c456aee73a1e3682dcb960bbe0d4c89f31ea321ee31f1b8b24eee1f6ed1479ed84652fea2c413ff3c35e1d22d75abc4351098366581d302126a113ed1b606a1755b3258c2d1d82580ea8a89d1e8766312b65f3b26108349f84e1016f2d84c5d1be64fd8b05babcaa9e6baf", @typed={0xc, 0xb85, 0x0, 0x0, @u64=0x401}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="2d0c575b36c05ff159b43ee63ec436e26eb8e7111b64a79959dd93f445d06102337019fb28b0460c203378460ca8366bb6bcfdeb8a2c22bcf15c11047a7cb1b5c069b0b00bd90b2ddea9965d2f1da1f7b84466cf0ee59c6c7556fd12c373b182d13a25449d45fc77c670bdd66d7aa9b88a5539a58fcf20cf11bd15aedbc3a3a9fce9f5bca1992dfcb859bb45eb3ea1edc2a593e2e051d92f6129ec968b70d8ee56ab384d2b7d03cd1ba09d0faf5b67d03ec300a096048c883a2a00096ae3612796bba8b095", @generic="7a7b025c78d64da93ab229e5f64fe2da1f6c032f46963a90c713100d3e754aef785cbf53c1c8d1f8e708275f3223ea784ae119976261bf29fab714953c652b5e2f086a9c6d031d07c6d8cfd63ecc5202d2f8b8d407efe44103fee57307bb737159591485c2", @generic="93564688b8408f7e074c9bd8c2fe9e48b85371e949f0ea88d61bcb1c0973ce0cc93221bf306ad50076936684d2e1eb981f1f79916d95f172566f0c04d52438e069b31328f6e1dba32d76a45ed3a58db3fc5dc544b8c5e92960b3e75a65fb576bbd8327db3d5ab761734ef22ced59f947be84b45c7bce5aebeff7bc69af6d2a76dd79a882491a3704ee7ccd114e37ef695c48f22e625b5a3b6f74", @typed={0xad, 0x67, 0x0, 0x0, @binary="9f835e9a1de79cc52fa027c7a3d37ab412c54bae42220af458b29f6ecc51907fcd56d17af074e869e4e50368927788d60f0477fe9cef700a67c6193e7ac767cb1f1090119f3cf2e41e76f35c94a7fd30508dd7b3747ea65b93ab4c79764ad8eec5669849d80186f274d943e2958f9c65405f60fdaf9b72fbc69e12ed8f1625245cf2d6b59ae48739fc18218e57808f5b2eb4b47aa44909c35a51073094f5152e4a4fea6452d437276c"}, @generic="edfbd6a6bdb10709114470f9485071db81da8572b862d617b118d56d3333b44887960b09ac21498f51b28c2553c241173bd041ec0a80dd60f0fbb102be"]}, 0x36c}, {&(0x7f0000002c00)={0x288, 0x28, 0x2, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x54, 0x0, 0x0, @uid=0xee01}, @nested={0x11f, 0x6, 0x0, 0x1, [@generic="5e9a6ef3e1294cdbb8a7a8e5a3ff9603101139058169805197a1226ec9d43a34cd469b13ed89768a9c1fd1a0d852e48ad84fbc9107f90bb93622a7bc5ab7ec95c7672225eb0ba0d27fd97c01a315b87915af2179", @typed={0x8, 0x21, 0x0, 0x0, @pid=r5}, @typed={0x5e, 0x8f, 0x0, 0x0, @binary="b8f4a4e67fa8a42879ed00d836726f3fe13c5b0de577544359c55db7191472ab394e38e241dd48aa7cc61b35d96b8282ea28d0a52d172f99105e6c9ce75d658e316191e28063dc6c70eb627ac6ffda26efb210a87e07bf4529f0"}, @generic="c7ef9e5e68411c9168dad57b2400a5514261638f9ac733fef813bde7f999364f1c2d8059902d10d882b87d9c555b1b14d6643334f9f8b64214c92220be060b62f5d48c434a2c6f90a9f1548f5b60552683fda03e64c206dbc5094ec73d4418"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64}, @generic="9ee0fd4c17391d7ff1d5820d2b86768cb4e517fc81975426c8718bc0162b27d2b6c714aa8e7ce062635e3845bc5b9dc054ecd98e8870f5b5369f62872b80187448619eb24d6d82c036c35693dc966ec0e7af3363df0135b0023043c371603efca02ad3062a41351679eb1dae1ece2032113db7f85dbcdd", @typed={0x6, 0x4e, 0x0, 0x0, @str=')\x00'}, @typed={0xbd, 0x53, 0x0, 0x0, @binary="cd7c47d3b2551ed33b41b38e95d10a1ab10a4a452f66128645b2e14661e34e07bbfcb521bcef725fc7e7257ad49be70c938e7d2dc11b318a7447bc72ca0641c8627e7eddd05ab6261daa778c56158c29799134ea8a5a8d8aedc7977a3c198895b0b5c4c9775d8eebc43fcbd696ef1779cdc8685d1b20e7742c58c116d28816fa445292a7d4883993ceb16b1b5a8583e4eee6f0d56559805e2c3743ad30967434214ff049ff66c35e91cbbcd70e0123be9eba21206da61a0bf2"}, @generic="60f5"]}, 0x288}, {&(0x7f0000002ec0)={0x2d8, 0x20, 0x100, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x36, 0x0, 0x0, @uid}, @generic="57fe63f62926640ceb72067b90dd3da065c56ed8e131778cf2753c178596", @nested={0x231, 0x5f, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @generic="874a20d3f0aa678956410cd36f0d547d07e8", @typed={0x4, 0x2c}, @typed={0xec, 0xe, 0x0, 0x0, @binary="7d66fff5b53590dc9cefed7d625fae3b129b5398ae5dffc67abc6b1ecff8e66f72d0f66a1ec3782ff64ca86152b9cc159ddf1d641099b2367e0e2011fb988aea2f74397e42512a8cdd7eff6b9b05b30b5b7d83e98d34629590e34a70568b059c20107ccaf4db33ac23e3ee1918f096ea084e772f357ebfde918ae3afe25b13caff1a5698e3287c26f21762a1742139ce81aef2d25c91294fee9c6ea74ec33d5c940a5ae1b49776bdb9868e77429aac6e8a2453e8129d7364bb584a6f4ff25f3b25d91b19bb465e76a152de6d5d7f31021354fa761df930b3cfff59250b1209b4b2eb0a3035e158f6"}, @generic="816fbbc47a393e7a613965df2f9b5474dea8cafeaf9d9c6495a3045de7790aa88ab3022f714a3ae59ca263", @generic="c3c442fc42ce9808ba6a4d712542a39198a494ce7b065e7497dfdfa9b96b9364d41cc00eddff5e9b41e1f3695d9cb8979e52ad1614a9066d68cdacb816cb4696e5d71f3ca00c3247b20492f08055231546ec7b1c15edd8e5270ffc1b21503cb030eb78ade54ca10ad60a07f971603c4eca3ce197afee01476e4982fd851f4fa54fa5b7ad03a2fee21b5cf7ecad7f672a7f5dc4601b33c57c02223d91c9acd4076f4ca6aece7f3c52b61aacf01be4c418ce35da7d1026681dcd70aeb5c2189f2df064ec366669d0293c0eaf86651b", @generic="7bcd868623abec7154395759928d", @typed={0xc, 0x8e, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0xffffff47}]}, @generic="4516ed0b1aefe5a1a1ea13b3f19fc8ea8e54885a27062cf14034c810dbc71215102218ca50483b2b7d139ebca3f9a949a70348a8f5931332d8f3a5e1a4b2cb0caceb74f20e2d5beded0c58f6a8a03ef267cab18e69fc00168c02b1b2a389408607927138e75527110ce86c439999"]}, 0x2d8}, {&(0x7f00000031c0)={0x12ac, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, "", [@typed={0xca, 0x5d, 0x0, 0x0, @binary="edf80637aefc45ae72d076f83e7afe93a674e1ffd99867bf4c454a97a0cd24b9144e29326ee4583c2dba665d9d22d3c2ff1f4bd86291e1046083e711f3dde809cf3bbd8ca018c91f66f5ea429c7ff1ad1053721c8c2d00fb408c57576476ef7ed8ea3de4fb2d7eae344f30b565ec35e0d994d0ee7122b4e75c5d733852d1bfc3ff369c5ea1651c24512e52d82ecabef0dccf06aff6efefd26474716b1772f79c2372dbfb3d5aef5ed8a13f9b0d2c49d20c6c3890550070fc5f4cf124f14f507c0c96a3fbd7f3"}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x51, 0x0, 0x0, @u64=0x1}, @typed={0x42, 0x28, 0x0, 0x0, @binary="90a96e71ddf30e36aa31a10fd2497d26c85451f0b1b167f6d870b31cfb9e50857cd86f6a9eb64d5ee35679aec799af2d96c7471cc01cca09b905d73611e2"}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x157, 0x25, 0x0, 0x1, [@generic="1bd581a1db5d80440a7b452ef02db2961ec8b03a0d197c151c6e3dd6734a64fda8eb42ffb61a819d91ee5462577594cda058b096ca92e45e61d31e4c90d3d8b9739c2f0e797f6d8b1f03be365b94d87435cc463795", @generic="62a7055ab37f7571445edb382d78c7f9cb99462b6e390c26ec17a1025f69073c5b97fc7c449cc207ff728e9f73d84ce655578cd71b4c13defb7abaa6ac03c03b8a7a58c6c0ea4f58cff9ceba8ff9f0726a1104d5fd1745c43e72f05cb61b5d51e61c63061f8e1c2a4026c60747b9bb633fd1f3d987401fac50f30ebd5e77fd10ef34b30b67859734dd49c76c27c3a14a06760b691802bc9d6e52d57b3a24030d47b4c656c81d8c9310b63d5222ee93669fe87f539068a0cfc7ec4c7adf555b13ea7e5d4508889572e2631248dbda3e36296b98704557a3a02b6252a09dd9ee449cb1392dc4e857992e2440c289a7", @typed={0x8, 0x7d, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x100c, 0x33, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @fd}, @generic="5c8e4c80c8aae7d516810ffbc6b816d3ae59cba061757f7f52696d57911a39c5607398c16c229c21d473d0ed0fc329b62e0a480acbe853a1eb8604b19f52ddf24495b6d5bc3797289e0dd6fa231968315824cae2973ec09bd4a3f646c264dcc94a87ecfa33375133639b8c0d61c153c3b0b3c2f6e6b12eadd80a5f53965156d6a6bb7050b5b9ee30c2f76f1dad0455cfbae4dd7ddfe02ba0b6a59e5a89a5ac4e2d87d9df10775eacd24b46cd96b24864c213413cd6551a73bba5111973fb8289155750a61f95052a7b9c2c23ef1c44133480a43ecf674d319c36d7cda852380d5d622a3a4ed7fab02be5b0a5fa53d939c40635ea06a972b9d4c35b08a9878833050f54a0f326fc684e30f0065ac639c1b360133f177f6797607f80b6f9be62fa88cc4b2a3f381ce25e3c7ad72cdeb235da0d3151d0fc76ec0ae2075b7e9e4c6796d837a038146ac4760d121c9fea23d8748b1c3203aee3cbbaf2aff0aed91e4f3959852d0bc568bd41c60bf34ad1a746cefb8da42885f85e38785161d31db77076e3399d1b5892f35d4d047650467e345e7cb3fc0fbd38d9c97270b820b43a048962a6af5220fba8dd33ba52bc1b0369aa131a9df720e979093fb7788431076a83ec159377c36bd9aefd2ece34bb5c34a7aa546def6290501cf113ccd6f689e8bca71f918b286bddb0d540fd25b01465557157ab872dbc9f4f3415105ed36a60d98ad6ed294323576f0e7db04da680b5d7c8d27e917d69782710d60a6964292a6ee2784f848bbd16f3efae27f8c69d79edae8404c8290c2366a8b2bb00a26891619d1cb09b64e812887fd223c2d0b9a9cf3f6bd2e7b9e0a5df221dafad95d37f67c10be5ddea84f94dc9ee76a9c5adcca805f9e6a38a45ba27af1d9d0e839608ba66bcf9c6c5a7ccd208656025fdd3e67abfee05866ef97d7962ffa3c92d38c3c915527033a7e5d7e69f6c94d188e5932953453ded13bbd04cd47a7cb699e44ef1970d4dd448534d15954c1939d8f5b71d45e3fc45a67044e40e50c51f8a9203ef17fb0a26de9352488c0fc1d12bc544cc9a25fe71b7c822834e2fc9a3d2fe41ec2f516823e5da8eea9502abc3a6382d731bc6ac4343b6dffd8027f0abd030950d286ff21497a8e5155434c627ad785dab132048b7d2bc5a4dcbbd577930d4fbdc18e8d3dcc2d93809174dad0ed9dc2c989787225a0e1ebdd6e3887caa4a04beb823df5ef9e3212ed5cf297775e65786e07b0023644482e478ce80e7340bc03599f42f391ebf6da3f7a286497bc1b97115ecb78df63cb1b2aed963e4ff71646abfb25f261af0336f8a8b7e9e8dec06ac4ee548551e16739fca96901b6defd71fecae81500355d1fd9657c8c44d5ee0b24a7e3b36d3cda78bc566f72036f0496b9b57e2ff54d799ce92e985a10b9ebff17fa2140ac75fb75dc4b8442f750c2f4fa67349781f6d5fa6553da1ebe5a73ba95507cc48890c5fe3cea10d86ddca11bb1a89af3e70af1d65dc2c4f5bac0704d74062955e55a4e8c5d629210abcb1963405cba4ac7023af6d2f8dc9e3078e95296d33c36f009862296d1f27ab80793ab5b66e84b0657d658dcb5393d5222b00db878ba271dc625c483eacda92dc9e11c56858cb85ae225b75d427f578add285aee31df9f8622be2d34ba95d87ece3531a0e329c53f1de4f393181fd25b4b81b34aa2a8447dffa961392a73a2c34616c6e6d5acb253fa210c169b80c39e01abc8024e69524db4810f9acb4f4d648e4669b19077802fb7b997a932bc71d1e09d7c42a895d686d4e551331918c4ece43618806d21347b1ac369efd304c16b75b9f58a2ecb0378bdb3eab7acfb95784caf62d406354a191dc5974791abb475fd2822f00fd85f4e4e0f301732df16fe63e0af4ef3b6cbc3de8f63051e5ebf23582f562cf2aca1663394533bb5e576db506d08258be9ce655da274cbf6fcbea52b8a7aed17c1bc7f41c5d630ef3443fa652c10e03f67db6088448729d7372024054fcbdd889a082576b7ca841927e6fa982cd61c6cbf1d5bb3c64ecea99566c60c810ebb29555f661109b261cb9fea870b977d45789897d2a01286be3bc1fb0128ce84ce96d7d2f69c287888fe99f4145a14f56745320b4e348ec079b33fd709801557c87d1946e3fad2d4854f710c68f837496768ab07759a1bedf9eb0301a3ad5efb06e4e28315e254b00348d4bba068f7a8c07233cb38d5dd9d403439407b6647d40ac7c9a286e38681fdb703bf137a83e1d86e3fcdacc7eaf86ebf9cefd0da52f8a970346331bf546bbe8961460fe65d19cd519a2e984c3e09b705d4a3d14f1af2689250625f3b5bef5eecdf6a8b56374c13780bb8b7711823a8f5d4ff047ab2a01709955d35bf0491e9cbe7e2fb3d68901887d3611a507d8ac360a7585fe3fab3a95893bf26e1d66d10b1245d7e69b7ec65a3646bb74c79e677ab08f20d37095fe5ff9fb65e0874a6718bd4ffb4e245151a5b4f32b52c4375bb084624d13ca4f33746d4c83e0c61c37b0f9baea54eb1b63ae2324864d8ee65fca511dc47faab71ec0fbd18f71efb55087d9dc657ca7435d0a397368d46fe6b4b841c72cd5c20f9f739c4718fc9d568688f819dceb1cff9747247e96a408b2fc4ba28d59fb0f6c69a7e34c6a282191e01877479d416f2e365daa4bf7df529343eb35acccbb9ebe738886502ec5c26f5b6b2ab4cf070a1ff089dec697024d2a3710a914557b379274bebd759f6c6b13f66781cd352f519f193ddd5592bc52219a0487b0b4b1a939582b53939a4beb3a940b8e772b8ccec104f8317091cd966a2541d7fd978f8d494f4376fe3ad7d22aac5abeef3673957e98f5ddb004e928fae7da8bbf8f504ae22adb45364a96cf6d79ed2ef40bcfe02c16fe654307c044b307d107661bb364d6cef9031a8596e9b50319c8f98d7ef77e0ea84a78fc91995b980ca789eef164f32cca8769dc2a5cf7759e57820ccd241983f293512b60e8a4f2b98669b1dd40988768dc93be44d15106f35b691cdc6fa5e2f3575aa50ce701309048928272301f9d8485dcaa1c2b52c8d137f0b25b362ac597c53add8b9e96729eff316b34854bcb6d240735d06a6c05a84b9a4cfeb9551958bb98411d1cf1feef367fdadb5fdc371d83117187020d093119e8af1983450f71ce3c175d2b86abf155cb8c1d3bf44b2aff5763468b8b58f3377fb3fb034e81cffe02754c5a0cba0aaaaf36e19d97ef324ab00bf5334796a559ba7365d94c6ba71157db526f7ba38363b4f24a7b1bc1a03a57b1242616be1916de4cb6312b310440be8f4c34502fb3a8e9cdfe13f5de08a4af5984db0173555ca3d81342b698e0beb3bba162b7a7f900a496d71d578df13f1731f17c2055ec7371bd9df9a447ab8c62e14d2a311b581120e8c7938e66ddc4e7cc94c13789096cae0e29b68d29d7f7edb01902e00b0a9864c5756bd59d62dfdd367ae2241f6ab8dc1c87341c92f0ebbbab3d8266b8a836a5965b6a22fdfda426c163affd097636d4c04a0a9539e1697bf1c41b45f93fdde5a44dd8f7ce95c1fc01d9cc86f2d5a625d3973c2c7e2af19659b071c39c02078dfaeb8e780d3e459e6ee15f50743bd7dfdf8881b7d4cc88dc6c5d16ce4b1e560d6c1c9f3178be3baba3c78d038631fb8f40c00c8014f310cb24478e4c579617ae6ddaff816ea7037a966177e1abeea3df5c627daceabbb8a899817ec2dbfe15ebf323f56d91de17084a8a0edba5d6ee0b7477043356f33446d776a483f15c538f242273c79e4bc511f9ca022e4ae4519f9edf46a237b056c17866f0594430935b9f731ce258b140d4170d11787e638da532ea8eeec831b30a3e1f1fd5dda6d46ab95d20bb846e83a9ff7d8e895a1411538205014c1554584a32a865df8d5209b847f169a81abfbd14971c16e316302f9041da789d8e93d09f88a0703f24f207115958e30799a3322666c31d766ce89d538bb340a8d1c8d786bc8bd25e3faabbb2bb3e65b8d557ddf9646e6b20ff65060627ef61aea346fb5209ce4d38f4dcfc88ac7cb557aa134a7411b0d3e73f8f15cba9712880516da979c7f06d31eb559ed9c0f9f96cde356cc49dccc9156835b88851cc6f6014a236f35bb905b15f098ae155ef92c6d3904ae66afd8c639d083aa046564ea5ccde0a545e2e1a32e2f3cd1e9db2d524abdb60af45536763afa0d36b6ee229b5c31765fc7679c5b9727f08237d4f421cdf0748e5fcbb3f74c251179107b201676610d164f62aaea9e16c34fa1a1694682ada3c24dff4e0eee9fa0018e2fd7f937f12ac6e2d9afd22eeaf94f506acaf15006e71071a6bc490aadcce23988d7475f7855edd63e92ad61fa28d33aef5d53da575ef98ea6b88dcd5767e7bfcc6d49f993ed2cfbd7fb4645fdd4baa53ffe62f446543fd2cd655400e9a01cf20e8a833829baaa42582736fea461c10b638ea36bf960b185a2641e16dc3357d6242b0ce396611d822b49a1533bf4225a4f0fee71e4f4ed9bae8bd8ce35a99cba1616fa7b9e45b6f2ef94ae4f9b5b6a87a45d7bd4dd059a1b5d50fc52085d229811a5ec0df6384f931c4164361c48cc78e644fba94da1faf8684546a8f608a7c9a8183980f144d1f5ba13f31d115e13cb47b7aa0b32c22ca2ff958f88e330bd3d961b9cc18819cb58acf4d251f7c55a08bffdfd744bfe7c47b3f137b857b54c6df949b7846b479b0263941a1377e478781b949f9e47b2f5e5af27385ea30f61039b042eb92fdc021404f4a152ede2fc56c656eee5e57526aebd463ca948f6e8c84cb9d75c31405cc9d9d15793215ab5a2803f042d6b4c2116843f9e058879aa8c4f7e0bbff961dc7a32d85818c2875f0bcc7fa8525176076478dd49a7a39c56a14069ea22d19a257a80820b168dfe3454757b91aba04596d2001e189740f80601aa3c6282af64920922307fa1bbf5e93237b873df54b2822c6fbda7e781a4cdd94fec4635dcace7b698c35b3741a41e06b2d4757295afab81de805dd3a0bb527920320467ebd8181f8492b3aeb5b51a885af8564a87931e109f232fcc5f3e8c482b5b4a3eea9bb5d3d40f885fa8e9ed11621b07b7f8f99756b66ae03f34e104e3a8321af0ab6e02688099c54f11f2b1126ce186dc6cf229f15213d33102ff611c3ebf8ed010bc68005e9f752792984743934e19de3341b1f37612dbf56003944e89d79e8c7359126fa93191882e6bb489e9a358531ee2f07332c095af70ba372b7916694c4f8e61ef5fbf13378c6e41869fb35e3077117ce2dfd482f4c6aaf032ef08a3cb665a87ef09471cbcf911f379804d986bf360fa447d30474be503cc0d5d449c0a407244bd661100d3dbb3ff1ce93e5e3b3aba488632618190e0de6e342dbd4013b85c928b267ccff93f0b42f6d69c06d16d75e3657070f4cc0be85d2c3e46f65c82c7363a61f3594c152ba7728d170497e0e5942e192ab88e5850a395399bac08fcdaef417ab987f18d48ac5c9b423d4db2c800f1fe1022a88fdf30472df9a31ee6284ad6f63465caf66cf8210a2c33dade8cf42bf18657dcdceef6409d4ad28515ce442597803643e9e88bafd31965e63f693ec186e18034978f6f4f9e085c883f11070567d42383827d110d8257fc4eb1763d2f359c586c3e65368e40771f9f70c3db46c43777a44f8c5d7061e3261f0787610c1ea74c9526a39e32f78bfd91ddcfeb3d1cc54909c3341f988cf5a6fd7057d6bd8aafb8b47032554f76d3513fc55034c9084d781f8f2532e3afbf58f0595f3ea2a93f0410e1451cfd23392eb64"]}]}, 0x12ac}], 0x9, 0x0, 0x0, 0x4000000}, 0x20000881) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:49:48 executing program 3: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'veth0_to_hsr\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:49:48 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xffffffffffffff82}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd2d1, 0x0, 0x2000000, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x2, 0xe32, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) creat(&(0x7f0000000500)='./file0\x00', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000005}, 0x488c4) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0xb341daa0822653b3, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0xb341daa0822653b3, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2006090}, 0x20000000) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}}, 0x8040000) 18:49:48 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 1718.343037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1718.344156] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1718.345374] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1718.346608] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1718.347872] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1718.349125] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1718.350339] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="65300000000040030000000000000000"]) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7fff, @none, 0x1, 0x1}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:49:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:49:58 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:49:58 executing program 2: mlockall(0x3) mlockall(0x0) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) 18:49:58 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x1000000, 0x0) 18:49:58 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d10dfa6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f88a6e8681f1f7d4666d7035828c4690bbf329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:49:58 executing program 6: r0 = epoll_create(0x0) epoll_create(0x7) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x1000000000) 18:49:58 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) 18:49:58 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7f, 0x7f, 0x8, 0x3, 0x0, 0x4, 0x10, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x80000000, 0x1}, 0x1490, 0x0, 0x7ff, 0x5, 0xffffffffffffffff, 0x9, 0xff, 0x0, 0xc0d, 0x0, 0x3f}, 0x0, 0xd, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 1728.526151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1728.527584] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1728.529401] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1728.530918] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1728.532442] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1728.533917] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1728.535382] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:49:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:58 executing program 4: write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b05e3c7713ad52aa2708a537f20842df70f8a1f4d7f5b644969d4302b4f932d82373c000525959bf1fa2c5e029d82d974ec3cd53725ee6cdf12d4"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'macvlan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) sendmmsg$sock(r3, &(0x7f00000006c0)=[{{&(0x7f0000000240)=@phonet={0x23, 0x1, 0x7, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="b291ea87b4dc17f56a863a1a24bf6e2cbf5b06ae485ba20865f0790f5b14e57b3f5d16501a867ce221775766268019526417a34b2cd7e2482d1638732ea75f91acf091be35ba8bf5414ac7c2c109b15946e137e5a3fddbcf31fba4bb3449f0f29fdab30532c8c3023d41e6f6e16b9738f07b0608230825717ba0bae6ec47b3a000", 0x81}], 0x1, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0xb963}}], 0x18}}, {{&(0x7f0000000440)=@llc={0x1a, 0x324, 0x5, 0x4, 0x5, 0x1, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="51f68ec2e8749996fc44525191b87a6c0f598a944521f8948a9d6f99ed2933c4915ffb48bdb60354fc78241b7f1b8134b272ff32f8b6a8596a513d010422fc988d7f38f2b36a66b6f22df9265625581f10e4efa0633d4c110f856a89ff781d75754b2bdc3fe1006070cbc299fa291ee09a271fd66e85a3e97068f4e403993171960f7d6e579cbdab496a6ea9ee538d38b6632bd1c3264edc7b98e4a6002b259a13ede4d97a92ad98ad33e2e366919ef41e02245dffbe20f48f0cb09e0a5d747a7b964909e0", 0xc5}], 0x1, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xfec}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x90}}], 0x2, 0x20004000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) bind$packet(r4, &(0x7f0000000200)={0x11, 0x17, 0x0, 0x1, 0x81, 0x6, @remote}, 0x14) close(r0) 18:49:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x36, 0x4) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x1}, 0xe) 18:49:58 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x11a}, {&(0x7f0000000140)=""/178, 0xe4}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) clone3(&(0x7f0000000200)={0xa800a000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x23}, &(0x7f00000000c0)=""/160, 0xa0, &(0x7f0000000180)=""/28, &(0x7f00000001c0)=[r2, 0x0], 0x2}, 0x58) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 18:49:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x1000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000002c0)={0x40, 0x0, 0x3, 0x3ff, 0x4e}, 0xc) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/13, 0xd}], 0x3) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000003c0)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) sendmsg$nl_netfilter(r0, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x4d4, 0xa, 0x9, 0x101, 0x70bd2d, 0x25dfdbfd, {0xc}, [@generic="d2fa09a90092cd3c9ae97f1400076f09611fa98f7fa729c8bb29c8214f27c79aa4c19afa86dc2fd14a49cbbe8b338f8ce727c6cc59e5d0bea9ba2aab690d1fb8f5ba9dbe50d6acc5892a45914e29f32d9e733af675c89721019c4aff54c4bc5db65e39997764a5ba0519456fc56f76a59e348fe2774480467a4f16ba6b555c75f245e748106b550a4edc4a3d5f769bdf4e0a38d4740fe38fd580cfc5608e5ed654e693b83e5724e92ede6677630a2c68b951896eb96a5f59e56bf0a2fd6b060e3118", @nested={0xd0, 0x3e, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @uid=r1}, @generic="1fd0f6e805a2375a5b1426384a8d73363bf416883d798db383c7f3dcbd995d0f3b2535c167a9841977e5e525bc835a489b156fdaf82da93e6a2d44d6833cb6e597dd", @generic="f8ee1f", @generic="d5d3f40157ad726bd447c3ce8824af4ceb8a25b5be9415a6ad3f9252d6bca5f2428612", @generic="554602a392c769b148e27319db0fef9e17f22fcfa5968f91bd7ad5cf6074436e85a10e4a0365409802a5687169387842df55515e5d44799f783946c0508d6a7726455f2b70d958ea662a6eb3d8969af0e94f49dead8752d75bdc9cac"]}, @typed={0x8, 0x6a, 0x0, 0x0, @fd=r0}, @nested={0x322, 0x42, 0x0, 0x1, [@generic="55322d94db7b", @generic="b350819138db85547aa6c9f4a4d3dd8ecfc59d465f4f5437414edc9a4a26ef79c6ebc695c6d0e83937c0c97af407679e009e9805e024432515552ff9a1ae13c2d9f886e77818867003abb11fc788aefe50023ba2a6550e22c1d4e64486640706a6d42e0ba3732e947e13bd10b7fc1728b996db16d6283f889659bddb0d73996f0d8eff671377b514811cf531ef23829d8c11dc6ab9b8ecd438859e6f4641bbebf86db8deb885147a90fb6fca4bb5735993cf24cbcc91315099", @typed={0x8, 0x4e, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x70, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="e1881e142d00b05d8536274bcce5fb0a41c33f2b14f1e74ff860b81ae28734dffa91859a9317906f55db9a4df60ee7d2652d17dd8df8d7f370aa4ce4b4c41c1c616b21c53dcc49ea6ed52d436298ae6dcf3dd90100fc3c7f1c3c1bfe0a5abbad06885978f971ae98aaf12923ebf2bbdcca3e9ee9e880d21d0a24", @generic="9152d4ff90bf42cd351a11f3270198ee5735161c6c075a9f283cc7f6ffd430adb77c42e6d63d47b0ca5202d19b2fed38a655df8ef7579d70705e4d29b59ef0d266", @generic="963923cb01d75cb2cc9830e31c7552d09b9ede1909dbf657eb8bc9cfd832b7cd8d6856e551d0833c52bf42d2ecbf60133669a5918ab9b4bc9d272eeb0687f38752802e7eb0181446b577adbcec058a313b1bc1c1146e4b089999de383748632f321ac646f1c39f82192ee9d2560aba6ec4fa996da795cec46e743d0ee0f8a03b9bc1363211462845da3ec39026de1a5a0901ccb45d0299b79ed63aede9f3f42596f432bffe3303eb57f1745335f52582dd01ce37614f19f1e2875a43cf9d", @generic="d4c024b4de17977f722a6b36dea06eaaa1496f27834e870b5ae3953a5342ae865c8abf8d645fb8388e4ea0373b91e9aae6643268ff852683c2059e9ca854e57274ccb52b1ae5eac2b4e869d52226eed8abd9953a97ec7d809eec2733343384e4e55976bf43960605dc33a9515d1ef4f8289ddf692862bbe2fded676f71956bb882d5068e7603f42eda7f5462c0fb69ab4ec5bdbc81a0adb0cc615bc12c4d6a0c92a76a03285cd9e9914b69bbc9a37b4d9802945e42c7f4f1d55ab422b89aba787f8c977413c67c752288bde30b441d24dee4f7474c21"]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000011) 18:49:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp, 0x6642, 0x6, 0xfff, 0x0, 0x5, 0x9, 0x1, 0x0, 0xccf, 0x0, 0x80000001}, r0, 0xffffffffffffffff, r1, 0x2) 18:49:59 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000870000/0x2000)=nil, 0x2000, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xff, 0x40, 0x1, 0x89, 0x0, 0x7, 0x20801, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0x1f, 0x1}, 0x10408, 0x1, 0x9, 0x0, 0x8, 0x400, 0x4, 0x0, 0x4, 0x0, 0x36}, r1, 0x7, r2, 0x1) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:49:59 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x2000000, 0x0) 18:49:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffff001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 1728.887173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1728.887691] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1728.888492] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1728.889297] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1728.889936] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1728.890767] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1728.891579] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:09 executing program 2: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) mlockall(0x3) mlockall(0x1) shmat(0x0, &(0x7f0000790000/0x2000)=nil, 0x0) 18:50:09 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:50:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xd3c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x48001, 0x2, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x1, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfd, 0xff, 0x4, 0x1, 0x0, 0x2, 0x2000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x8}, 0x14108, 0x8000, 0x80000000, 0x8, 0x7f, 0x7fffffff, 0x5, 0x0, 0x7, 0x0, 0x8}, r0, 0x9, 0xffffffffffffffff, 0x0) 18:50:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_setup(0x60ad, &(0x7f0000000080)={0x0, 0x7, 0x8, 0x0, 0x388, 0x0, r1}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x1}, 0x401) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:50:09 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000800aaf40474408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e83b"], 0x57) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0xffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) open_by_handle_at(r0, &(0x7f0000000080)=@orangefs={0x14, 0x1, {"50f5b38d3aabd385f806aceafe97f129", 0x1ff}}, 0x2001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:50:09 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x206002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x58}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x400000000000) 18:50:09 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x5000000, 0x0) 18:50:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb23d}, 0x0, 0xffffffffffffffc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000008000000000d001700000008000300", @ANYRES32=r5], 0x30}}, 0x0) close_range(r0, r2, 0x0) [ 1739.049815] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1739.056893] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1739.058485] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1739.059671] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1739.060675] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1739.061837] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1739.064836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.066136] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.067375] Buffer I/O error on dev sr0, logical block 0, async page read [ 1739.072747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.073861] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.075219] Buffer I/O error on dev sr0, logical block 1, async page read [ 1739.077539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:50:09 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x72, 0x80, 0x2f, 0x0, 0x0, 0x2, 0x34000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x44, 0x5, 0x1, 0x3, 0x7ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 1739.088767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.089889] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.091185] Buffer I/O error on dev sr0, logical block 2, async page read 18:50:09 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7f, 0x6, 0x7, 0x3f, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffff, 0x9}, 0x10, 0x9, 0x0, 0x7, 0xe7, 0xb37, 0x9, 0x0, 0x6}, 0x0, 0x1, r1, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 1739.103817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.104781] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.106122] Buffer I/O error on dev sr0, logical block 3, async page read [ 1739.123516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.124783] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.126865] Buffer I/O error on dev sr0, logical block 4, async page read 18:50:09 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xfffefffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4d96}, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xff, 0x3, 0x80, 0xf9, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0xb4b7, 0x5}, 0x40014, 0x10000, 0x3, 0x0, 0x905, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x6, r0, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate']) mlock2(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x0) [ 1739.136856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.137782] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1739.139022] Buffer I/O error on dev sr0, logical block 5, async page read [ 1739.140124] Buffer I/O error on dev sr0, logical block 6, async page read [ 1739.141202] Buffer I/O error on dev sr0, logical block 7, async page read [ 1739.142426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.142916] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.143652] Buffer I/O error on dev sr0, logical block 0, async page read [ 1739.158658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.159228] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.159908] Buffer I/O error on dev sr0, logical block 1, async page read [ 1739.175901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.176485] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1739.187006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.191432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.192011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:50:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x4005, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x200, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xff, 0x3, 0x0, 0x3f, 0x0, 0xffffffffffff98c5, 0xa0210, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x6, @perf_bp={&(0x7f00000000c0), 0x8}, 0x6040, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x5, 0x0, 0x6, 0x0, 0xa2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) [ 1739.208848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.214425] No source specified [ 1739.214828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.216606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.219676] No source specified [ 1739.227530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.237879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.242852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.259514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.263707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.270745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.280772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.297368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.298583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.299225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.299876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.337760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.338539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.341233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.346403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.347032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.349205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.349839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.354947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.356030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.359232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.360269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.360868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1739.385779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:50:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xc175}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:50:19 executing program 2: mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mbind(&(0x7f00004e0000/0x3000)=nil, 0x3000, 0x1370b7d883de9bb, &(0x7f0000000000)=0x9, 0x7, 0x7) 18:50:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:50:19 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:50:19 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x6000000, 0x0) 18:50:19 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) io_setup(0x22, &(0x7f0000000000)=0x0) io_destroy(r3) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00'}) close(r0) 18:50:19 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x2) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x1b1) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0xd, 0x0, &(0x7f0000000040)) 18:50:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x0) [ 1749.133533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1749.135005] blk_print_req_error: 30 callbacks suppressed [ 1749.135025] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 18:50:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) [ 1749.137555] buffer_io_error: 40 callbacks suppressed [ 1749.137572] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1749.140134] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1749.141562] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1749.146387] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1749.149450] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:19 executing program 6: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/188) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xe, 0xffffffffffffffff, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x40) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01f8ffffffffffff2e2f66696c6530009121f43ba1fec78b4f8033a388849e1dd81dfb04a2c10cbbbec13d5d54b0764da5a379a5aba1e893ada4ed72371279913cf13d812f1506b378802184914f3b0cf41948f0"]) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 18:50:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/253, 0xfd}], 0x1, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x1, 0x10020, &(0x7f0000000300)={0x0, 0x989680}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000003c0)={0x3, 0x1, 0x7, 0x8, 0x1, 0xb3, 0x7}, 0xc) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x9, @any, 0x1, 0x1}, 0xe) 18:50:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x5d, 0xe1, 0x0, 0xff, 0x0, 0x12, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8000, 0x10000, 0x0, 0x8, 0x1, 0x5, 0x1, 0x0, 0xbf5, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:50:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2, 0x3, 0x3e, 0x1, 0x41, 0x6, 0x81}, 0xc) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:50:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x800000000000000) 18:50:19 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x8000000, 0x0) 18:50:19 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x7fff}}}, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r1) 18:50:19 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) readahead(r3, 0x1000, 0x400) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xfff, @any, 0x1, 0x1}, 0xe) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) [ 1749.620524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1749.621479] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1749.622789] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1749.624034] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1749.625244] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1749.626471] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1749.627683] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:32 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x10000000, 0x0) 18:50:32 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x3f, 0x9, 0x9, 0x0, 0x1000, 0x20000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x4310, 0x4}, 0x800, 0x6, 0x9e3, 0x3, 0x800, 0x200, 0xce, 0x0, 0x80000001, 0x0, 0x100000001}, 0xffffffffffffffff, 0x5, r0, 0x9) 18:50:32 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) write(r1, &(0x7f00000000c0)="60f5244f1413ea98f45420e0f4bc7bdbb89cda352f3b8ef9587573cb76ef21d2a46bd914ce79ffe804d965d111a84132b28169b2a5ff5a94b3cc7a7f8fe7bb515a8270af5c2c9b75d71ba1bfe264e1e5c5bd0330a1700cba16286ca9dbb92f28193cb1bd913b9ea0d43ff73e41d80772fffe31b3ec78924a450df2e8b0d9584b0796912aca48202ff48b5b37615cc8c68c5456a6cf9517b9c17f919c99c2d529", 0xa0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xfc, 0x7f, 0x4, 0x0, 0x0, 0x100000001, 0x4000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xed6b, 0xfffffffffffffff9}, 0x4400, 0xfffffffffffffff8, 0x29a, 0x5, 0x7, 0x80000000, 0x9}, r3, 0x0, r2, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000040)={0x8, 0x1, {0x3, 0x2, 0x1, 0x2, 0x4}, 0x5}) 18:50:32 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:50:32 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf7, 0x3f, 0x40, 0x3, 0x0, 0x8000, 0xa3, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff42, 0x1, @perf_bp, 0xc492, 0x4, 0x10001, 0x3, 0x6, 0x9, 0x8, 0x0, 0x8000, 0x0, 0x2}, r1, 0x4, r0, 0x1) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:50:32 executing program 0: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, &(0x7f0000000000)=0x3, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:50:32 executing program 4: syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x138b, 0x0) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x100) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @ipv6=@tcp={0x3, 0x6, "52a4ed", 0x62b, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@dstopts={0x88, 0x3a, '\x00', [@jumbo={0xc2, 0x4, 0xffffffec}, @generic={0x1, 0xd2, "c261545e88ad77bf764db0f80dd85bef39962e54f333ca3d2b4751824c3c0815f915a5c0c46ec5bae65025534f6f8b23c35db6780b189d09d1e78d5f9a76ee6cfa34dea379f4d47732eec2400c3513cbaf88b8c9cc7324c51ae8d70a61595514e4ca30f152a4e50a38c2b521ca352ca727149aa2c257df3324873cc65ac353476adaba29a3a757c6bd2524a56bfd32d5d661bae01409fa30a19cd3185f47d5e6ac624dd6dd4cf5f455bb05d94d5c9b6e27f41358274720af91d1a54efe569022c0afdae0ff37d4202a86757dca3ba18a6e21"}, @hao={0xc9, 0x10, @mcast2}, @generic={0x99, 0xd3, "97a2342e48dcd9219dc157dd7834754dd56eb2dd19b467b17f1546f7716b17a21163d7330a8cd0ffd9485d2999d6367b3c3c064e610889a1198a06f1402d74263ac02d9e595b6b7458fecc733a3a40eb09e9b4d9e6c1d1d70d77deb454f38939f4c80b1f69d9788514cfc354cb3f7cfb5f522d2fd9d49bf4b98ebe1e5b6452f6d1c85099367fefc4c00a4461a594e58a54c2a221af64b73daad22aef24750076a9a0587836e0236d49d7b79ea367979613eccc25598d2553ca39dcfb11bb7889add59a35ea6ab68b21efe22bf762053c152974"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1]}, @hopopts={0x85, 0xa, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0xff, 0x5, [0x6, 0x9, 0x6dc4, 0x5, 0x1, 0xda, 0x9662, 0x1, 0x1a8]}}]}, @hopopts={0x2, 0x5f, '\x00', [@generic={0x0, 0x11, "ff330cdd6c86be6d43e51a4862dbd000aa"}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x40, 0xd0, "6e7cd4dcf642b47b5fb47c5e9b96a60f3f8aea669066702243a5052fd7ce21b3818d618213b42fdc6e17683cade60b5e7fee2ab2b901ec5195e3f2d0eda04ed847e274d37cf891234f4273e58c996cfd0ef042f9c1761abe45fd3edd85030d20abc8d282facbfc279f3c1df18b555c5d53ffb6dedb503bd7ba3558bc5a51f9f4a48733855edfeb1cb1cc5a204529ad1cfbca6f794d06257cbb3e37670ba6c66cf3176f383a8e04efff0b1b3f2fac2fbad910757387a67b5f89ede12244c32b6e020ab8fdb72a17ca6cbb584a6092d078"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x40, 0x80, [0x5, 0xfb, 0x8e, 0x101, 0x3, 0x200, 0x4]}}, @pad1, @generic={0x0, 0xea, "23e4855b0b88abeccbcb1e6ffe6dda19cb5ae93fd8c39abb19db806c13d56f158a16029b9dba201c9b8b8f776e13a9b8db599f0bb8cd5f8cd024ddd9d75527be08b34ce0f3d6457742ccadd955a58c67e869c80d913a6f8a847a3a3cd7303df97f63c73b88891b83048e14c253a6f694d2ee7a9ee5959c7d4e1ae3111cf41aa4093f71303009da4027cdd0cae5812653dbeedcc224bdc41f22d5cd7af773ebc6803cc202736a0001ba83a5ec044765a544c701957689a756ecf21e376d37c14ee2828db01127c35a58d4d9d167f2f8264f76883980728efa3c53661bc580e9b4a6646964bf1e57f8618a"}, @hao={0xc9, 0x10, @local}, @generic={0x8, 0xce, "8d4c10d59fce7437bd9fcae5c99eba3827a1ea01574e2338e8404c3edb8e290aa9fed5b4556ef25aa8390f7cffec7fb10183d4d7687fb1f72b67e66f4896f36f225b286401b6d3f2523e14540c57d14f24a822eacd5edcc8aca8c4a493e5a98e946f35faf3a167438064e416514efa2e7eb37e148fb451095e8bb2ca5b02777b6a65f832ec413cfbcdb226e4be85a87c8b362a806f1e08845ff53cfd18ddbb69c153591db40c596a37e3901795d4af53dde302c25d005ad088181fb39802378dfe9b0a3c1eab0efb48629a645b22"}]}], {{0x4e24, 0x4e23, r0, r1, 0x1, 0x0, 0xa, 0xc2, 0x8, 0x0, 0x7ff, {[@timestamp={0x8, 0xa, 0x0, 0x4}, @mss={0x2, 0x4, 0xea81}, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @window={0x3, 0x3, 0x1}]}}, {"15a13a55904f901d1de2c4a34aa462e0508711db0ce20b843c6189aa752088fcba68be885c56f1d9826f0c581b12acea5cc303655c93e7891840b517405b01c6121066b15b7eb0713b8ed2f2186e98f0102064decda03ce05e9d14368b8194be7cb8aa0f776b013d5d90614aebc3fba54df8e0d987b445b065bdaf3f07cb9cea62e6af0fc44b79805de2408e4c6d873c983d3200c5129e175f3dbf171a1f0ecb336d62a13ff66c53d6c187e76dcb92f792ba69644b06e688f39711"}}}}}, 0x653) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) 18:50:32 executing program 2: mlockall(0x3) mlockall(0x2) mlockall(0x1) mlockall(0x5) mlockall(0x6) mlockall(0x4) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mlockall(0x2) [ 1762.183702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1762.184601] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1762.185831] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1762.186977] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1762.188128] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1762.189252] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1762.190380] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:50:32 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^/@+,\x00') madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:50:32 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408df700a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f000000000000d7035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:50:32 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x112, 0x9) 18:50:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4f, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x100000001, 0x50, [0x6, 0x12e6, 0x7, 0xffffffff80000001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) write$evdev(r2, &(0x7f0000000180)=[{{}, 0x17, 0x3f, 0x1}, {{0x77359400}, 0x2, 0x1f, 0x375}, {{0x0, 0x2710}, 0x4, 0x8, 0xfff}, {{0x77359400}, 0x15, 0x0, 0xce1}], 0x60) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x2, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000000040)) 18:50:32 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x20000000, 0x0) 18:50:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0xab, 0x3f, 0x9, 0x0, 0x1f, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x40840, 0x5, 0xfffffffc, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x101, 0x0, 0x2}, r0, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:50:32 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000000)=""/32, &(0x7f0000000080)=0x20) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r1, r0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x121) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040), 0x0) 18:50:32 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x9, 0xff, 0x3, 0x0, 0x3, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xd76, 0x7fff}, 0x4a24b, 0x2, 0x0, 0x8, 0x1, 0x2, 0x3, 0x0, 0x81, 0x0, 0x7fff}, r1, 0xb, r0, 0x8) 18:50:32 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x6611, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r6) 18:50:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x23bb, &(0x7f0000000040)=0x2) [ 1762.608535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1762.609544] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1762.611202] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1762.612488] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1762.613778] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1762.615068] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1762.616362] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:42 executing program 6: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setflags(r1, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x5, 0x20, @local, @local, 0x7800, 0x7800, 0x4, 0x40}}) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@can={0x1d, 0x0}, &(0x7f0000000200)=0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r9}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'sit0\x00', r9, 0x4, 0x2, 0x50, 0xa9b, 0x4, @rand_addr=' \x01\x00', @private2, 0x0, 0x80, 0x1000, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x6d, 0x9, 0x4, @local, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x40, 0x8001, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004800000008000100", @ANYRES32=r3, @ANYBLOB="6c01028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff03000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff03000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r10, @ANYBLOB="c00002807c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c00040000001f090000008009004002ffffff7f04001ce0da020000010481203dcf00002ac71f070500000001000354050000002a011f0000000000ff0773020400000000001fe00000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x2d0}, 0x1, 0x0, 0x0, 0xcc800}, 0xc800) r11 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r11) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:50:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000004640)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x101, 0x2}, 0xe) 18:50:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14811, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff00}, 0x0, 0x0, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:50:42 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:50:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20b731b00559e9e91b7d693415777dbf6a000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25200000000c0099000500000069000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) mlockall(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x75}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) 18:50:42 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f47476efdeb1ff964b113cf650ae3090308a41f1fd6c2cf47498f8895dca6e8010000800004c8ea5314b9e77d000000328f7b8dd7035828a900000000000000000000006e3f1ef88acc6da59534a1cc6e007e41bcc8bb158dbd1115c919e218fb201d486fea0f78c7eb74de0a02b5795de5c14a8e9af489205cf6245135f99a169cb4956177d274b1404f43d5df3f2df00dca132d09aeca1352ed19fd79"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xef, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x10, 0xffffffffffffffff, 0x8) fstatfs(r0, &(0x7f0000000140)=""/207) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf6, r2, 0x1, 0x0, 0x6, @remote}, 0x14) creat(&(0x7f0000000240)='./file0\x00', 0xcc) close(r0) 18:50:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x3ffffe00, 0x0) 18:50:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:50:42 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x200, 0xa1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x1, 0x40, 0x2, 0x0, 0x2, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x8200, 0x5, 0xc4cb, 0x5, 0x2, 0x118e, 0x5, 0x0, 0xdcf, 0x0, 0x3}, r0, 0xc, r1, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:50:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) [ 1771.793516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1771.794004] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1771.794701] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1771.795350] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1771.795977] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1771.796627] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1771.797277] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x80) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @none, 0x401, 0x1}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x1000, 0x24, 0xe9, 0x8}, {0x1, 0xfd, 0x5, 0x1}, {0x7, 0x20, 0x40, 0xe}, {0x3, 0x3f, 0x40, 0x89}, {0x0, 0x8, 0xff, 0x401}, {0x7, 0x80, 0x5, 0x1}, {0x101, 0x7, 0x81, 0x8001}, {0x0, 0x40, 0x80, 0x8}]}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x13, @any, 0xffff, 0x1}, 0xe) 18:50:42 executing program 0: dup(0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x480002, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r2, 0xfff}) epoll_create(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x9, 0xd8, 0x1, 0x0, 0x4, 0x14404, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp, 0x4013, 0x4, 0x1, 0x2, 0x5, 0x9, 0x2, 0x0, 0x8001, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r0, 0x1) 18:50:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x7fefe600, 0x0) 18:50:42 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "f9", "74408d", 0x6006, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:50:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) madvise(&(0x7f0000872000/0x3000)=nil, 0x3000, 0x0) shmget(0x0, 0x2000, 0x100, &(0x7f000086f000/0x2000)=nil) [ 1772.096783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1772.097733] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1772.099043] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1772.100326] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1772.101626] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1772.102913] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1772.104181] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:42 executing program 6: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xee}, 0x4}, 0x0, 0x0, r0, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = getpid() perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x7, 0x7a, 0x9, 0x7, 0x0, 0x59c, 0xf9088d022d351e31, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580)}, 0x8, 0x4b8, 0xfff, 0x3, 0x31f, 0xc9, 0x8, 0x0, 0x1, 0x0, 0x5}, r2, 0xc, 0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000004c0)={0x53, 0xffffffffffffffff, 0xa5, 0x9, @buffer={0x0, 0xae, &(0x7f0000000180)=""/174}, &(0x7f0000000240)="e0bbb6bf3b237a4d31f940e6200df1f2af9b9dc45275230d715b247320da1bfdf1afd656b7273ae73013eb081e30705e79813bfc763ac2cda91f1bd5db6151a3c3f3342ae13aa2ba9ab3e6472581194c9eb84183c177220147501c08f114c92bd545c2786ad65a14d2f1411333f5fd7bc590034f9fbb1e9557c3bd008ac11f30a564239990564cf2becdd2fad7032ccae54adf528a9267ccafc7c11d9024b7a1588bc82d02", &(0x7f00000003c0)=""/252, 0xf417, 0x20, 0x0, &(0x7f0000000300)}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000540)={0x83e, 0x80}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7, 0x80, 0x4, 0x40, 0x0, 0x101, 0x10590, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000040)}, 0x80, 0x9, 0x2ca, 0x7, 0x5, 0x7, 0x4, 0x0, 0x1b7, 0x0, 0x40}, r2, 0xc, r4, 0x3) 18:50:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf9, 0x4, 0xe3, 0xfb, 0x0, 0xff, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x5}, 0x8100, 0x9, 0xfffffffe, 0x5, 0x6, 0xfffffff7, 0x3, 0x0, 0x8bc, 0x0, 0x6}, 0x0, 0x9, r0, 0xa) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x7, 0x3}, 0x2) 18:50:52 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) fstatfs(r0, &(0x7f00000003c0)=""/4096) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000873000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x1) 18:50:52 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) write$tcp_congestion(r0, &(0x7f0000000080)='scalable\x00', 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:50:52 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:50:52 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "f9", "74408d", 0x6006, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:50:52 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0xffffffffffffffff, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:50:52 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x7fffe600, 0x0) 18:50:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12464, 0x20000000000, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:50:52 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2f147288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'nr0\x00', {}, 0x100}) [ 1781.793306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1781.793838] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1781.794543] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1781.795214] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1781.795848] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1781.796528] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1781.797198] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:50:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9483a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x46026, 0x2, 0xfffffffe, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x101) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='*\x00') getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x6611, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) dup(r3) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) socket$inet(0x2, 0x2, 0x7) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x6611, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000a004e2100000002fe8000000000000000000000000000aa070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e23000000030000000000000000000000000000000009000000000000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000095dafc01000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000100000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000005fc01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000e647ff0200000000000000000000000000010200"/778], 0x310) listen(r2, 0xcde9) 18:50:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000000)) 18:50:52 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:50:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mlock(&(0x7f0000873000/0x4000)=nil, 0x4000) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) madvise(&(0x7f0000873000/0x3000)=nil, 0x3000, 0xe) 18:50:52 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x7ffff000, 0x0) [ 1782.096292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1782.097539] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1782.099269] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1782.100964] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1782.102579] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1782.103811] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1782.105036] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:51:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000000)) 18:51:03 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:03 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) 18:51:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x6, 0x1c000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x64, 0x5, 0x7f, 0x40, 0x0, 0x9, 0x608f4, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa7f2, 0x4, @perf_config_ext={0x4, 0x20}, 0x10080, 0x20, 0x8, 0x7, 0x48fac9d1, 0x7f, 0x7f, 0x0, 0x4, 0x0, 0x400}, r0, 0x8, r1, 0x1) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) syz_io_uring_setup(0x2f1, &(0x7f0000000280)={0x0, 0xc9cf, 0x10, 0x2, 0x51, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000003c0)=0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r5, 0x5, 0x0, 0x1, 0x5, 0x0, {0x0, r8}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000180)=0x2) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:51:03 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xff600000, 0x0) 18:51:03 executing program 4: write$tun(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x9d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001140)=0x1) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x400000, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001080), 0x7fffffff, 0x101440) sendfile(r1, r2, &(0x7f00000010c0)=0x13, 0x7) tee(r0, r1, 0x1000, 0x9) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000080)="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", 0x1000) close(r0) 18:51:03 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x110441, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x40400000000, 0x4000000000) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x6100}, 0x91cd034e4809f27}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x65f0, 0x6, 0x1, {0x0, r3, r4}}, 0xff) [ 1793.161644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1793.162668] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1793.164051] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1793.165374] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1793.166780] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1793.168073] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1793.169390] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:51:03 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0xffffffff, 0x0) 18:51:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) 18:51:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x68, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:03 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109041, 0x0) [ 1793.428564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1793.429574] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1793.431309] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1793.432952] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1793.434549] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1793.435878] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1793.437205] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:51:03 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x1, 0x3, 0x22, 0x0, 0x20000000000000, 0x2240e, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0xe20, 0x1f, 0x7f, 0x9, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x0, 0x7}, r1, 0xb, r0, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:51:03 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/202) mmap(&(0x7f000086e000/0x3000)=nil, 0x3000, 0x2000004, 0x100010, r0, 0x48f3000) 18:51:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:04 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:51:04 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x2) [ 1793.844981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1793.845772] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 18:51:15 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:51:15 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:15 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/202) mmap(&(0x7f000086e000/0x3000)=nil, 0x3000, 0x2000004, 0x100010, r0, 0x48f3000) 18:51:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:51:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x8, 0x3c, 0x8, 0x80, 0x0, 0x2, 0x8608, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x440d0, 0x400000, 0x8000, 0x4, 0x0, 0x2, 0x5, 0x0, 0x7fff, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:15 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x4) 18:51:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) [ 1804.908931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.909867] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1804.911194] buffer_io_error: 5 callbacks suppressed [ 1804.911209] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1804.913032] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1804.914223] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1804.915394] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1804.916547] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:51:15 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/202) mmap(&(0x7f000086e000/0x3000)=nil, 0x3000, 0x2000004, 0x100010, r0, 0x48f3000) 18:51:15 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40000) fcntl$setflags(r1, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:51:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:51:15 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x5) 18:51:15 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/202) mmap(&(0x7f000086e000/0x3000)=nil, 0x3000, 0x2000004, 0x100010, r0, 0x48f3000) 18:51:15 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d000000e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d460600035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:51:15 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 1805.238037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1805.239512] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1805.240950] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1805.242339] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1805.243728] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1805.245119] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1805.246496] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:51:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0xfa, 0x1) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 18:51:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6289, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) munmap(&(0x7f0000871000/0x1000)=nil, 0x1000) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x1) 18:51:25 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:25 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x6) 18:51:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x4, @any, 0x5}, 0xe) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x3ff, @none, 0x9}, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r3) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:51:25 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200008d1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000240)=""/183, 0xb7, 0x1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000003c0)=0x28) 18:51:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f00000013c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/113, 0x71}], 0x5, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001680)=""/206, 0xce}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000002780)=""/10, 0xa}], 0x4, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002880)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/65, 0x41}, {&(0x7f0000002980)=""/40, 0x28}], 0x2, &(0x7f0000002a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002a40)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002ac0)=""/211, 0xd3}, {&(0x7f0000002bc0)=""/16, 0x10}, {&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/45, 0x2d}, {&(0x7f0000002cc0)=""/243, 0xf3}, {&(0x7f0000002dc0)=""/208, 0xd0}], 0x6, &(0x7f0000002f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003000)=""/97, 0x61}, {&(0x7f0000003080)=""/79, 0x4f}, {&(0x7f0000003100)=""/239, 0xef}, {&(0x7f0000003200)=""/221, 0xdd}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/205, 0xcd}, {&(0x7f0000003480)=""/79, 0x4f}], 0x7, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000003780)=[{&(0x7f00000036c0)=""/143, 0x8f}], 0x1, &(0x7f00000039c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000002219265600000000000100000001000000431fadd6410c0930c7372a2d5eaf71c828ab16d1f63b7931cc6f3a9c0b15feabbd733901a3ae15183c85033199ed4a03001aae571fd7161aed1a4ff78032f7ac68f69a0b46f9bc3535e6c8bb10fcef2bd47d2cf98770b59a06c285040009115e9adceaf4aef3566ce97061b363feb67f5412f122fdb00b1bfca993d0e094c998525c546e2cf870cdd26c0594a05d11cf2101c97833562a858d2f38d26495aa00000000000000000000000000007e6d6275ee3a6120f5db1bda276d4e1a3443804994e803a9981bcb00f906f3b23b378e1ea65319f15bbb2c4bd29dfa23ff83dec748fd88a553fb28ac5902567df3e5b0bab68b702044ee6b184e0537e5c23249d176b4f2d2b211"], 0x30}}], 0x6, 0x20, &(0x7f0000003980)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) 18:51:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) sigaltstack(&(0x7f0000870000/0x2000)=nil, &(0x7f0000000000)) 18:51:25 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:25 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) write$tun(r0, &(0x7f0000000080)={@void, @void, @mpls={[{0x800}], @ipv6=@udp={0x9, 0x6, "212311", 0x60, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x15, 0x2, 0x1, 0x5, 0x0, [@loopback]}], {0x4e22, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "28ae57cdadf01019d296c7b9ef0bf74e7f179143fc834662", "066d7da5893ee62a29621d17816df83e733817a3e44159562c8aebd08e83940d"}}}}}}, 0x8c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r1) [ 1814.996908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.997992] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1814.999490] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1815.000900] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1815.002299] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1815.003711] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1815.005131] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:51:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x7, 0x2, 0x4, 0x0, 0x100000000, 0x10000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x639, 0x8}, 0x0, 0x7fff, 0x8, 0x3, 0x6, 0x4, 0x7, 0x0, 0x596, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x3) mbind(&(0x7f0000873000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x3, 0x1000, 0x0) 18:51:25 executing program 0: sysinfo(&(0x7f0000000140)=""/179) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) write$binfmt_elf32(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x13, 0x20, 0x3f, 0x6, 0x6, 0x2, 0x6, 0x8, 0x176, 0x38, 0x2c1, 0x3f, 0xbcb, 0x20, 0x2, 0x3ff, 0xfff, 0x4}, [{0x1, 0x9, 0x10000, 0x4841, 0x7fffffff, 0x988, 0x1, 0x1}], "7a6705d7f818eb28b7ab2c0c881bbed1100c086d00eca676a30ee9fa73bf41561f91dce60b8bef69a89097a62b21f73ec550d3df8a4266e2cde32bc07ffed78b161108dd8df804d692a283de66008cb3d4c6ef796f8ca285074cbaa521de7e578fef1aaa52b73ae1f86e9b8746edefe56a7b900b54b532e850e5b2b110daaea1ff05b156f4d7cbc9d7a7b5d54d77b7792a30530ba3b3040fa3697d3d20ae18515dfb18fe0a4e90f9c9c0ef81fc09e185b4a95c7027b29226f2086c73dec63579cded841470f896957cc68ff6a538af5629cc498e3a556a4003067726d888dbc6be61", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x93a) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x2, 0xd4, "03feea2d546113119b43e0a45b2d4e3da2356c569994187a52f82637687bf0589f205a93dc2b77c8d3d030314acdd19579b4a138fecddb67ffcb2e171bd3434058b5029d9d1badc8ef198e439aacdaf776318261a690c9be316f4b092d64480b93ee12dab033ac91d9a03e3501fa570518913fc8f8aa470d00f40b4eb6d2b88bd3fd80def84d24e7ce10cb69b4d8926c29144c5d748cfc591eb39c19a32cd80ffb77c85b7017e5576f547c5a916ce20a693c4cc09e4c2b421f01d0745738c6df26cc23c9ea4bc9f08ca18f6eb45ececa96cf4ae8"}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:51:25 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e24, 0xe9, @mcast2, 0x400}, {0xa, 0x4e24, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x7, [0x401, 0x0, 0x4, 0x5, 0x2, 0x9, 0xff, 0x6]}, 0x5c) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00001e74408d0020a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d466670035828c4690bca329e3b31d00e469901e6855665f6c85a234ff5b4dd9f34c6208ffde473fa6fe0be1805b76feda4463fb7d4971d762c6f871e10395ffdd731"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0xfffffff8, 0x20, 0x8, 0xfffffff7, 0x5, 0xffff}, 0x1c) close(r0) 18:51:25 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x8) 18:51:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:51:25 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0xffffffffffffff0c, 0xffffffffffffffff, {r0}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xdf, 0x2, 0x80, 0x0, 0x0, 0x9, 0x208, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x873}, 0x2000, 0x0, 0x1, 0x7, 0x3, 0x5, 0x7, 0x0, 0x7, 0x0, 0x86}, 0x0, 0x5, r2, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:51:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x7f, @none, 0xf517, 0x2}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xdccb, @none, 0x8}, 0xe) 18:51:36 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d000000e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d460600035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:51:36 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000871000/0x1000)=nil, 0x1000) 18:51:36 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xa) 18:51:36 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfffffff8, 0x80}}, './file0\x00'}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1}, 0x4) close(r0) 18:51:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x441}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x0) 18:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x72) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x40, 0x1}, 0xe) open_by_handle_at(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="140000005200000000020000fcff0600faffffff0200000007000000b55390d1f4ff297e249a8a91f2b408c94b794b944810434242e4d54b796719c792dd483225030d8193cc57c1baea8726477643deeae03d456f47a8f04514ba1dd59a51e30b398b18be7b17c609543dc0b2e7e6ffab80ad6a0a3b32755be9fa2cf6e23b93e88a9b1b6f68d54a9fc3dd505e4b2d11b1d8f143c13426ffc0f137fb6bc0f478f21b822bcd5e268f5d4b5697e7e16752c30c21fede65de6097637184f1ace1baa45dc380bf836ac6e136a826249cb970a0fac3350cc1b892f69c8a"], 0x8482) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r4, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000100)={0x4, 0x7, 0xb6f, 0x1, 0xa8, 0x9, 0x20}, 0xc) 18:51:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:51:36 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x771a00, 0x40, 0x4}, 0x18) open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, r0, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000003c0)={{0x3, 0x1, 0x5, 0x33, 0x4, 0x7}, 0x1a1, [0x81, 0x1, 0x2, 0x8, 0x1d4d, 0xd3b, 0x9, 0x400, 0xffffffff, 0x6, 0x10001, 0x1, 0x3, 0x7, 0x65, 0xff, 0xec, 0x1, 0x2, 0x3, 0xd1, 0xffffffff, 0x2, 0x6, 0x9, 0x2, 0x1, 0x9b, 0x6, 0x7810, 0x6, 0x1, 0xfffffbb9, 0xfffff001, 0x3f, 0x8b, 0x9, 0x101, 0x0, 0x4, 0x8, 0x401, 0x0, 0x3b, 0x3, 0x20, 0x800, 0x18ef, 0x8, 0x5, 0x80, 0x800, 0x1ff, 0x401, 0x43fd, 0x401, 0x100, 0x5521, 0x8, 0x40, 0x6, 0x7, 0x7, 0xffffffff, 0x0, 0xfffffffb, 0x1, 0x4, 0x2, 0x1, 0x7bbc, 0x10001, 0x7, 0x1, 0x5, 0x2, 0x20200, 0xff, 0x8001, 0x0, 0xffffff52, 0x1, 0xfffffffb, 0x80000001, 0x5, 0x2, 0x2, 0x1000, 0xff, 0x1, 0x6, 0x4, 0x7fff, 0x7, 0x1, 0xffff, 0xffffffff, 0x0, 0x7, 0x8, 0x0, 0x0, 0x4, 0x6, 0x4, 0xffff, 0x9a6, 0x200, 0x5c42556e, 0x3de6, 0x6, 0x61, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800, 0x4, 0x80000000, 0x9, 0x771d, 0x400, 0xffffffff, 0x8, 0x80, 0x6, 0x7, 0xffff, 0x1, 0x8, 0x100, 0x2, 0x7, 0x6, 0x1000, 0x200, 0x3ff, 0x4, 0x5, 0x3f, 0x0, 0x1, 0x1ff, 0x1000000, 0xece, 0x8, 0x2, 0xfff, 0x6, 0x800, 0x4, 0xfb2c, 0x7fffffff, 0x0, 0x3cb6, 0x4, 0x7fff, 0xca84, 0x0, 0x7, 0x3, 0x7, 0x0, 0xdad, 0x2, 0x3, 0x8, 0x5, 0x6, 0x2, 0x809, 0x7, 0x9, 0x4, 0x6, 0x1f, 0x3ff, 0x1, 0x3916ff8, 0x0, 0x81, 0x200, 0x9, 0x10000, 0x1f, 0xeb98, 0x0, 0x3d, 0x8, 0x5c080000, 0xe10, 0x9, 0x6, 0x3, 0x3, 0x9, 0x7f, 0x200, 0x200, 0x6, 0x9, 0x1, 0x2, 0x7fff, 0x2, 0xa6, 0x0, 0x1, 0x101, 0x2, 0x9, 0x9, 0x7, 0x9, 0x7, 0x3, 0x5, 0x2, 0x6, 0xe4fa, 0x800, 0xb5, 0xff, 0x7, 0x82, 0x9ee5, 0x1e2ae0ab, 0x7, 0xffffffe0, 0x0, 0x6, 0x400, 0x1, 0x3f, 0x3f, 0x7f, 0x10001, 0x80000001, 0xffff0001, 0x6, 0x2aa9632e, 0x8, 0x5, 0x8001, 0x3, 0x80000000, 0x401, 0x1, 0x4, 0x7, 0x4, 0x9, 0x6, 0x0, 0x5, 0x200, 0x7, 0x9, 0x0, 0x1ff, 0x3, 0xffffffff, 0x200, 0x8, 0xff80000, 0x9, 0x1ff, 0x0, 0x7f, 0x7fa98b1d, 0xfff, 0x8, 0x2, 0x10001, 0x1, 0x3, 0xefac, 0x9, 0x2, 0x7fffffff, 0x572, 0x4, 0xffffff00, 0x6, 0x1000, 0xfee2, 0x9, 0x3, 0x40, 0x1, 0xfff, 0x55a, 0x8001, 0xfffffff8, 0x0, 0x2, 0x0, 0x1d38dcdf, 0x356, 0x7ff, 0x200, 0x3ff, 0x0, 0x200, 0x40, 0x40, 0x8, 0x8, 0x1000, 0x7, 0x20, 0x7f, 0x1, 0x9, 0x3f, 0x8, 0x2, 0x0, 0x7f35, 0xff, 0x6, 0x9, 0x7, 0x4, 0x7fff, 0xa3c, 0x9, 0x421c, 0x80000001, 0x8, 0x0, 0x8000, 0x1152e6d3, 0xad3, 0x1, 0x3, 0x6, 0x85, 0xffff, 0x8, 0x5, 0x6, 0x7, 0x8, 0x7, 0x200, 0x3ff, 0xff, 0x2, 0x6f0, 0xe21, 0x8, 0x7fffffff, 0x5, 0x6, 0x8, 0xa4b0, 0x7ff, 0x100, 0x5, 0x8, 0x4, 0x1, 0x2, 0x7ff, 0x2, 0x5, 0x55, 0x1, 0xff, 0x2, 0x2, 0x89, 0x94a, 0x8, 0x3f, 0x7f, 0x0, 0x8, 0x0, 0x21e2, 0x40, 0x8, 0x5, 0x10000, 0xeb22, 0x1, 0x7f, 0xfff, 0x101, 0xffffffff, 0x8, 0x7f8, 0x3f, 0x3f, 0x7fff, 0x84, 0x7, 0x51535b45, 0x7f, 0x8, 0x2326, 0x6, 0x5, 0x7, 0x0, 0x0, 0x8, 0x9, 0xd2d, 0x4800, 0x0, 0x8, 0x0, 0x7, 0x7, 0x7fffffff, 0x80000001, 0x3, 0x624, 0x2, 0x8, 0x5, 0x101, 0xff, 0x6827, 0x904, 0xffffffff, 0xab, 0x7f, 0x4f, 0x67a3, 0x6, 0x3ff, 0xd05f, 0x40, 0x9, 0x0, 0x6, 0x8, 0x7, 0x959, 0xcee2, 0x80000001, 0x59a9, 0x0, 0x40, 0x6bda, 0x2, 0x6, 0x5, 0x6, 0x3f, 0x0, 0xfff, 0x6, 0x8, 0x401, 0x81, 0x2, 0x9, 0x82de, 0x2d314a08, 0x9, 0x80000000, 0xa, 0x1, 0x31800, 0x80000000, 0x8, 0x2, 0x9, 0x1, 0x2, 0x6, 0x9, 0x40, 0xfff00000, 0x101, 0x7, 0x2, 0x4, 0x3, 0x8000, 0x660, 0x1, 0x9a9, 0x8, 0x1, 0x1, 0x7, 0x1, 0x9, 0xfffff0c0, 0x7, 0x4, 0x4, 0x401, 0x5, 0x6, 0x7ff, 0x5, 0x4, 0x1, 0xfffffffd, 0x9, 0x4, 0x10000, 0x4, 0x4, 0x7, 0xff, 0x6, 0x0, 0xfffffffd, 0x401, 0x5, 0x1f, 0x6, 0x54f1, 0x9, 0x8, 0x8, 0x5, 0x3, 0xfffff733, 0x1, 0x7, 0x9, 0x30000, 0x8, 0x7fffffff, 0x8001, 0x3ff, 0xc45c, 0x7fff, 0xd3d, 0x4, 0x4, 0x0, 0x4, 0x9, 0xb83, 0x10000, 0x7fffffff, 0x6, 0x3, 0xed, 0x50e1, 0x3, 0x2, 0x5, 0x0, 0x9, 0x9, 0x9, 0x3, 0x20, 0x64c, 0x40, 0xdbe4, 0x4, 0x858, 0xfffffff9, 0x73e, 0x40, 0x1, 0x22, 0x40, 0x200, 0x3, 0x7fff8, 0x0, 0x1e69, 0x81, 0x5, 0x1, 0xffffff03, 0x8, 0x7, 0x400, 0x5, 0x8, 0x1, 0x4, 0x1, 0x5, 0x5, 0x3f, 0xadc8, 0x7d, 0x8, 0x4, 0x7, 0x80, 0x20, 0xa2a, 0x8a, 0x1f, 0x2, 0x0, 0x3, 0x0, 0x80000000, 0x3, 0x7, 0x8, 0x81, 0x7723, 0x1, 0x0, 0x8001, 0x9, 0x4, 0x5, 0x8, 0x1, 0x5, 0x1, 0xffffff99, 0x9, 0x1, 0x3f, 0x2, 0x7fffffff, 0x7f, 0x1, 0x3, 0xfffffffe, 0x8000, 0x7fff, 0x3, 0x0, 0xd56, 0x9, 0x8, 0x3f, 0x7, 0x9, 0x6c1000f3, 0x8, 0x6, 0x0, 0x1f, 0x3f, 0x401, 0x5, 0x7, 0x3, 0x5, 0xfff00000, 0x3, 0x9, 0x101, 0x7, 0x6, 0x3ff, 0x40, 0x3ff, 0x3f, 0x3, 0x99f, 0x80000000, 0xaab, 0x2f, 0x400, 0x80, 0x3ff, 0x40, 0x6, 0x0, 0xffffffff, 0x2, 0xfffffffa, 0x1000, 0x2, 0x101, 0x7, 0x5, 0x8, 0x0, 0x400, 0x0, 0xffff8001, 0x1ff, 0x5a, 0x8, 0x3f8c, 0x80000000, 0x40, 0x9, 0x7, 0x9, 0x2, 0xff, 0x2, 0xdb44, 0x7f, 0x3, 0x40, 0x7, 0x800, 0xffff, 0x10001, 0x8, 0x8000, 0x1, 0x3, 0x8, 0x1, 0x0, 0xfffffffd, 0x8, 0x9, 0x1000, 0x81, 0xefa, 0x3, 0x1, 0x9, 0x5, 0x1, 0x81, 0x40, 0xffff, 0x6, 0x2, 0x4, 0x1, 0xa2c0, 0x0, 0x5, 0x20, 0x2, 0x3ff, 0x100, 0xfffffff9, 0xfffffffd, 0x4, 0x6, 0x0, 0x7fffffff, 0xfffffffb, 0x2, 0x4, 0x8, 0x7fff, 0x9, 0x4, 0x8001, 0x9, 0x800, 0x4, 0x200, 0xaf63, 0x1ff, 0xffffffc1, 0x5, 0x10001, 0x0, 0x2e, 0x1000, 0xdd, 0x6, 0x4, 0x5, 0x80, 0x1ff, 0x0, 0x80000000, 0x8, 0x1, 0x8001, 0x5, 0x1, 0x6, 0x0, 0x8, 0x200, 0x80, 0x8, 0x5, 0xf31, 0x7fff, 0xa0000000, 0x7ff, 0x7, 0xae, 0xffff, 0x40, 0x3, 0x101, 0x0, 0x8001, 0x101, 0x40, 0xffff, 0xffffffff, 0xfffff800, 0x8, 0x2, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x1, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x4, 0xff, 0xfffff876, 0x1, 0x9, 0xe7, 0xfffffffb, 0x20, 0x3, 0x1, 0x1, 0x6, 0x8, 0x8, 0x100, 0x2, 0x1f8, 0x6, 0x3f, 0xfff, 0x10000, 0x8, 0x7, 0x2, 0x20, 0x0, 0x1f, 0x9, 0x81, 0x2, 0x100, 0x6, 0x9, 0xa1, 0x1, 0x15, 0x9, 0xffffffff, 0x7, 0x59, 0x8001, 0x8, 0x401, 0x8000, 0x5, 0x7, 0x6, 0x0, 0x101, 0x7fff0000, 0x1f, 0x1, 0x401, 0x3, 0x7f, 0x4, 0x1, 0x5e, 0x2800000, 0x1, 0x101, 0x10000, 0xfff, 0x10001, 0x80000001, 0x5, 0x6, 0xffffffff, 0xffff, 0x7, 0x3ff, 0x2, 0xf38c, 0x6, 0x4, 0x10000, 0x1, 0x4, 0x8, 0x12fe6239, 0x2, 0x3, 0x0, 0x0, 0xb0, 0xfffffff7, 0x0, 0x6, 0xffff8001, 0x32b, 0x8, 0x0, 0x1ff, 0x8001, 0x4000, 0x8, 0x9, 0x5, 0x6, 0xd2, 0x8, 0x2, 0x3, 0x8, 0x4, 0x9, 0xd2, 0x3f03, 0x6cf7, 0x8, 0x6, 0x7, 0xfffff001, 0x100, 0x2, 0x80000000, 0x9, 0x4, 0x1, 0x8, 0x1, 0x9, 0x318, 0x401, 0x0, 0x606b907e, 0x80, 0x5, 0x80, 0x1, 0xf3, 0x857, 0x1, 0x8, 0x3f, 0x0, 0x4, 0x2, 0x1, 0x7, 0xfffffff7, 0x8, 0x3122, 0x4a98, 0x7f, 0x5, 0x6, 0x85, 0x8, 0x8, 0x4, 0x8, 0x1, 0x7f, 0x3, 0x8, 0x7c, 0x1, 0x9, 0xd4b, 0x80, 0x400, 0x1, 0x1f, 0xffffff3f, 0x800, 0x0, 0x7f, 0x8, 0x8b2, 0x7, 0x3, 0x7d000, 0x1, 0x3, 0x3, 0x3f4, 0xc79, 0x2, 0x3fff8, 0x9, 0x20, 0x1, 0x89c, 0xff, 0x20, 0x3, 0x9, 0x1, 0x1, 0x1, 0x0, 0x3, 0x7, 0x3, 0x4, 0x8, 0x3f, 0x8, 0x7ff, 0x7, 0x80, 0x5, 0x400, 0x0, 0xa34, 0x0, 0x80000001, 0x7fff, 0x100, 0x5]}) 18:51:36 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) dup(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:51:36 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000240)=0xffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x101000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1000, 0x8, 0x0, 0x10000}, {0x401, 0x54, 0x3}, {0xd61, 0x8, 0x1, 0x1}, {0x0, 0x7, 0x5}]}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x53, 0x1000, 0x4, 0x4, 0x79, r2}) close(r0) 18:51:36 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xc) 18:51:36 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:36 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xff, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0xbe, 0x3, 0x2, 0x6, 0x0, 0x1c, {{0xa, 0x24, 0x6, 0x0, 0x0, "74b98d06f7"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6d8, 0xac3, 0x9, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x20, 0x3}, @ncm={0x6, 0x24, 0x1a, 0x3ff, 0x30}, @dmm={0x7, 0x24, 0x14, 0x5, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8c, 0x3f, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xfd, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf8, 0x4, 0x54}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x3f, 0x3, 0xff, 0x20, 0x50}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xfb, &(0x7f00000003c0)=@string={0xfb, 0x3, "c593db49d6fb2d76b3d6722f1105f0a58d2660720e7eda76d38df72291d43e266f3c522030e555f83e1e66988e147eaec1d26a9935e194c244199908b50d3393b7c1efa49c5f5aa2e4b89669ea29c718563b2651d6992e7337c7cb1f6d5ad64743e2d7648d79f7c573764a0bb2175ff006c8c84799c6324a11da2b7ac648a2a99530509f8307f8b345e2d32fb0e2b03ff3f77b441fe94c147aad37baefd329831f28b3c86005d10c7ede46cf820ee6021ce9f933c150f5274e5ba1fbb1cea56abd30ad7b77963d4f7ccc3e77b13b096bd7f764b86593e2cbabdf8fe034dc0690d78d19e689985d2fdb02422dc340c9918a7208b7493103df4f"}}, {0x64, &(0x7f00000004c0)=@string={0x64, 0x3, "e4352c8ecc974e291d4256893827f53ca33646cc9632d13ab5c40d92a462ad526b5595ee34d276085618b4d4c3b09614ccfd7f36d630d92429d412a8995aa0afc3159192c5d02b504260fc3d55124a16de72572ee413141c66e7b6be46ccf4cbc2c9"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1004}}, {0x87, &(0x7f0000000580)=@string={0x87, 0x3, "91469c4a8b9a8de48316c3b8a25f3e4837335efe9eb33a27eed452a22a83747f15c971d1c191b4bd76ee0d6156e0e1c2a02dd63e17e5c1cd08b42f0c0c61efc614bd44817e296be27bba380c6ef55de33eaac59c6726d3b4e77b358e00d0280cf81387fc41866cb36a3fac5fbdee9ffe6e5ee5d1588d448eeeec78bdd5a0b722cc2f72ef2b"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x409}}, {0xd1, &(0x7f00000006c0)=@string={0xd1, 0x3, "047c0241ab31bab292d400de677a61a128f9a6df6c3aeced1f316ff82e891221291cd1354f7e66124e66dda57e406cabff472c6480c146155c54ce0d03354874d2e61cbee36cd11a55e0d986c17903440c191d041c4a79d1a4053378bb0e41931abe28ee57d2e57050f09a0ed17c53b139946e7867fa84e0b18ccdb27781a083d8ac4a1ba4d737502011b3d0683f9260f853c0f6895fd5bd3b366eb966d12c64766c53e0d936286f361ce8f204706c8b1d8998272289e253a4d29e794abd78449de22d866d506c5efc25ab86438bce"}}, {0xb9, &(0x7f00000007c0)=@string={0xb9, 0x3, "417d30aa66595d98968ff4f4cc4f8799ef8f10fce2977ab37ece1e6c08f2c5a9db4ce659bfdfd5949077c137d76ebc34658908717f05600f7c93e68deb601dfef37ad6256fc3827c55feb7b01ef5381e90a74357c41695275dc16bdecc08abb2692c85f7e9dc80c32f169d9c87028a5a28c08ad79fcf5c8657343828c3e96e2a5c6e500746e4ac71d4eb97459b955245f959edaf18709c6549f5c306a0ac628a9baa3e3b063e246c84dad36b650d581e0e7bc78260e762"}}]}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_ZONE={0x6}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7f}]}}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x7}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x1}]}}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfaff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xbe}]}}]}, 0xe4}}, 0x4000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:36 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0xef, 0x7f, 0x0, 0x0, 0xfffffffffffffbff, 0x24000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x40000, 0x10000, 0xfff, 0x7, 0x7, 0x8, 0x6, 0x0, 0x1, 0x0, 0x407}, 0x0, 0x10, r0, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x14) [ 1826.397120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.400418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.776401] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1826.777323] CPU: 0 UID: 0 PID: 11539 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1826.777345] Tainted: [W]=WARN [ 1826.777350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1826.777358] Call Trace: [ 1826.777364] [ 1826.777371] dump_stack_lvl+0xfa/0x120 [ 1826.777396] dump_header+0x107/0x950 [ 1826.777419] oom_kill_process+0x278/0xa00 [ 1826.777439] out_of_memory+0x34b/0x1690 [ 1826.777459] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1826.777477] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1826.777494] ? __pfx_out_of_memory+0x10/0x10 [ 1826.777514] ? perf_trace_preemptirq_template+0x259/0x430 [ 1826.777539] mem_cgroup_out_of_memory+0x164/0x190 [ 1826.777559] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1826.777583] ? mark_held_locks+0x49/0x80 [ 1826.777601] try_charge_memcg+0x81f/0xf30 [ 1826.777624] ? __pfx_try_charge_memcg+0x10/0x10 [ 1826.777646] charge_memcg+0x7b/0x290 [ 1826.777662] __mem_cgroup_charge+0x28/0x90 [ 1826.777680] shmem_get_folio_gfp.constprop.0+0x547/0x13a0 [ 1826.777705] ? perf_trace_lock+0xb5/0x5d0 [ 1826.777720] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 1826.777743] ? __lock_acquire+0x694/0x1b70 [ 1826.777758] shmem_fault+0x1f3/0x9f0 [ 1826.777776] ? __pfx_shmem_fault+0x10/0x10 [ 1826.777795] ? __pfx_perf_trace_lock+0x10/0x10 [ 1826.777818] __do_fault+0x10d/0x480 [ 1826.777835] __handle_mm_fault+0x11cc/0x3310 [ 1826.777855] ? __pfx_perf_trace_lock+0x10/0x10 [ 1826.777869] ? __pfx___handle_mm_fault+0x10/0x10 [ 1826.777886] ? __pte_offset_map_lock+0x190/0x330 [ 1826.777908] ? no_page_table+0xc7/0x220 [ 1826.777925] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1826.777948] handle_mm_fault+0x2c3/0x9b0 [ 1826.777969] __get_user_pages+0x58a/0x2f10 [ 1826.778000] ? __pfx___get_user_pages+0x10/0x10 [ 1826.778020] ? lock_is_held_type+0x9e/0x120 [ 1826.778038] populate_vma_page_range+0x282/0x410 [ 1826.778059] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1826.778081] ? __pfx_find_vma_intersection+0x10/0x10 [ 1826.778098] ? do_mmap+0x6a4/0x11d0 [ 1826.778115] __mm_populate+0x100/0x3a0 [ 1826.778136] ? __pfx___mm_populate+0x10/0x10 [ 1826.778156] ? up_write+0x195/0x520 [ 1826.778170] ? lock_is_held_type+0x9e/0x120 [ 1826.778186] do_shmat+0xdd4/0x1310 [ 1826.778205] ? __pfx_do_shmat+0x10/0x10 [ 1826.778219] ? __x64_sys_futex+0x1c9/0x4d0 [ 1826.778233] ? __x64_sys_futex+0x1d2/0x4d0 [ 1826.778249] __x64_sys_shmat+0xcf/0x160 [ 1826.778261] ? xfd_validate_state+0x55/0x180 [ 1826.778281] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1826.778297] ? do_syscall_64+0x85/0x360 [ 1826.778315] do_syscall_64+0xbf/0x360 [ 1826.778333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.778346] RIP: 0033:0x7fcae51b4b19 [ 1826.778357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1826.778369] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1826.778381] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1826.778390] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000000019 [ 1826.778398] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1826.778406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1826.778414] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1826.778433] [ 1826.803773] memory: usage 307200kB, limit 307200kB, failcnt 19 [ 1826.804335] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1826.804809] Memory cgroup stats for /syz5: [ 1826.810958] anon 35577856 [ 1826.812157] file 277667840 [ 1826.812587] kernel 1327104 [ 1826.813014] kernel_stack 98304 [ 1826.813549] pagetables 262144 [ 1826.814020] sec_pagetables 0 [ 1826.814510] percpu 64 [ 1826.814893] sock 0 [ 1826.815258] vmalloc 0 [ 1826.815629] shmem 269258752 [ 1826.816066] file_mapped 13406208 [ 1826.816605] file_dirty 16384 [ 1826.817061] file_writeback 0 [ 1826.817554] swapcached 0 [ 1826.817959] inactive_anon 264286208 [ 1826.818528] active_anon 4096 [ 1826.818998] inactive_file 8192 [ 1826.819513] active_file 12288 [ 1826.819994] unevictable 48934912 [ 1826.820545] slab_reclaimable 825424 [ 1826.821130] slab_unreclaimable 164400 [ 1826.821714] slab 989824 [ 1826.822154] workingset_refault_anon 0 [ 1826.822743] workingset_refault_file 0 [ 1826.823357] workingset_activate_anon 0 [ 1826.823957] workingset_activate_file 0 [ 1826.824583] workingset_restore_anon 0 [ 1826.825195] workingset_restore_file 0 [ 1826.825778] workingset_nodereclaim 0 [ 1826.826378] pgdemote_kswapd 0 [ 1826.826871] pgdemote_direct 0 [ 1826.827390] pgdemote_khugepaged 0 [ 1826.827923] pgdemote_proactive 0 [ 1826.828477] pgscan 121 [ 1826.828870] pgsteal 4 [ 1826.829375] pswpin 0 [ 1826.829765] pswpout 0 [ 1826.830195] pgscan_kswapd 0 [ 1826.830654] pgscan_direct 121 [ 1826.831198] pgscan_khugepaged 0 [ 1826.831712] pgscan_proactive 0 [ 1826.832262] pgsteal_kswapd 0 [ 1826.832744] pgsteal_direct 4 [ 1826.833254] pgsteal_khugepaged 0 [ 1826.833780] pgsteal_proactive 0 [ 1826.834334] pgfault 295281 [ 1826.834788] pgmajfault 0 [ 1826.835242] pgrefill 668 [ 1826.835669] pgactivate 20013 [ 1826.836191] pgdeactivate 123 [ 1826.836669] pglazyfree 0 [ 1826.837134] pglazyfreed 0 [ 1826.837570] swpin_zero 0 [ 1826.837991] swpout_zero 0 [ 1826.838469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11530,uid=0 [ 1826.841529] Memory cgroup out of memory: Killed process 11530 (syz-executor.5) total-vm:105812kB, anon-rss:35044kB, file-rss:56352kB, shmem-rss:4864kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 1826.919614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.920695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:51:48 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) dup2(r1, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:48 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:48 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:48 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:51:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6c4e, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000871000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 18:51:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = io_uring_setup(0x3e96, &(0x7f0000000240)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x6a18e8849253ba78) close_range(r1, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xea9b}, 0xe) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) 18:51:48 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe) 18:51:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) 18:51:48 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x47, 0xa0, 0x8, 0x81, 0x0, 0x8, 0x21080, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x110c0, 0x6, 0x10000, 0x5, 0x3, 0x10001, 0x9b34, 0x0, 0x9b8, 0x0, 0x1004}, 0xffffffffffffffff, 0x0, r0, 0x9) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:51:48 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x30, r0, 0xcb9dc000) 18:51:48 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x10) 18:51:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 18:51:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6, 0x0) mlock2(&(0x7f000086d000/0x6000)=nil, 0x6000, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x8000) mlock(&(0x7f0000874000/0x3000)=nil, 0x3000) [ 1838.598227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1838.599167] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 1838.600360] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1838.601495] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1838.602633] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1838.603781] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1838.604920] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 1838.994302] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1838.995821] CPU: 0 UID: 0 PID: 11594 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1838.995858] Tainted: [W]=WARN [ 1838.995866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.995879] Call Trace: [ 1838.995888] [ 1838.995897] dump_stack_lvl+0xfa/0x120 [ 1838.995933] dump_header+0x107/0x950 [ 1838.995972] oom_kill_process+0x278/0xa00 [ 1838.996009] out_of_memory+0x34b/0x1690 [ 1838.996051] ? __pfx_out_of_memory+0x10/0x10 [ 1838.996101] mem_cgroup_out_of_memory+0x164/0x190 [ 1838.996137] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1838.996181] ? mark_held_locks+0x49/0x80 [ 1838.996214] try_charge_memcg+0x81f/0xf30 [ 1838.996254] ? __pfx_try_charge_memcg+0x10/0x10 [ 1838.996296] charge_memcg+0x7b/0x290 [ 1838.996325] __mem_cgroup_charge+0x28/0x90 [ 1838.996359] __handle_mm_fault+0x14b5/0x3310 [ 1838.996397] ? __pfx_perf_trace_lock+0x10/0x10 [ 1838.996423] ? __pfx___handle_mm_fault+0x10/0x10 [ 1838.996455] ? __pte_offset_map_lock+0x190/0x330 [ 1838.996496] ? no_page_table+0xc7/0x220 [ 1838.996527] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1838.996569] handle_mm_fault+0x2c3/0x9b0 [ 1838.996608] __get_user_pages+0x58a/0x2f10 [ 1838.996665] ? __pfx___get_user_pages+0x10/0x10 [ 1838.996703] ? lock_is_held_type+0x9e/0x120 [ 1838.996735] populate_vma_page_range+0x282/0x410 [ 1838.996773] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1838.996808] ? __pfx_find_vma_intersection+0x10/0x10 [ 1838.996838] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1838.996868] __mm_populate+0x100/0x3a0 [ 1838.996905] ? __pfx___mm_populate+0x10/0x10 [ 1838.996944] ? up_write+0x195/0x520 [ 1838.996969] ? lock_is_held_type+0x9e/0x120 [ 1838.997000] __do_sys_mlockall+0x50f/0x5c0 [ 1838.997026] do_syscall_64+0xbf/0x360 [ 1838.997060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.997083] RIP: 0033:0x7fcae51b4b19 [ 1838.997102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.997125] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1838.997147] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1838.997163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1838.997177] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1838.997192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1838.997206] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1838.997241] [ 1839.031822] memory: usage 307200kB, limit 307200kB, failcnt 38 [ 1839.032737] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1839.033665] Memory cgroup stats for /syz5: [ 1839.034000] anon 35635200 [ 1839.035157] file 277663744 [ 1839.035590] kernel 1273856 [ 1839.036011] kernel_stack 65536 [ 1839.036520] pagetables 253952 [ 1839.036988] sec_pagetables 0 [ 1839.037474] percpu 64 [ 1839.037842] sock 0 [ 1839.038204] vmalloc 0 [ 1839.038572] shmem 269262848 [ 1839.039037] file_mapped 8388608 [ 1839.039562] file_dirty 4096 [ 1839.039999] file_writeback 0 [ 1839.040486] swapcached 0 [ 1839.040887] inactive_anon 269303808 [ 1839.041450] active_anon 4096 [ 1839.041904] inactive_file 8192 [ 1839.042405] active_file 4096 [ 1839.042852] unevictable 43978752 [ 1839.043416] slab_reclaimable 824560 [ 1839.043945] slab_unreclaimable 154712 [ 1839.044533] slab 979272 [ 1839.044921] workingset_refault_anon 0 [ 1839.045510] workingset_refault_file 0 [ 1839.046064] workingset_activate_anon 0 [ 1839.046672] workingset_activate_file 0 [ 1839.047311] workingset_restore_anon 0 [ 1839.047874] workingset_restore_file 0 [ 1839.048463] workingset_nodereclaim 0 [ 1839.049011] pgdemote_kswapd 0 [ 1839.050310] pgdemote_direct 0 [ 1839.050792] pgdemote_khugepaged 0 [ 1839.052266] pgdemote_proactive 0 [ 1839.052778] pgscan 185 [ 1839.053412] pgsteal 6 [ 1839.053789] pswpin 0 [ 1839.054180] pswpout 0 [ 1839.054545] pgscan_kswapd 0 [ 1839.055017] pgscan_direct 185 [ 1839.055519] pgscan_khugepaged 0 [ 1839.056005] pgscan_proactive 0 [ 1839.056539] pgsteal_kswapd 0 [ 1839.056992] pgsteal_direct 6 [ 1839.057475] pgsteal_khugepaged 0 [ 1839.057970] pgsteal_proactive 0 [ 1839.058489] pgfault 304332 [ 1839.058942] pgmajfault 0 [ 1839.059386] pgrefill 1602 [ 1839.059799] pgactivate 21557 [ 1839.060287] pgdeactivate 187 [ 1839.060748] pglazyfree 0 [ 1839.061177] pglazyfreed 0 [ 1839.061588] swpin_zero 0 [ 1839.061987] swpout_zero 0 [ 1839.062441] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11583,uid=0 [ 1839.064655] Memory cgroup out of memory: Killed process 11583 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:51:59 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:59 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:51:59 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:51:59 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x7, 0x0, 0x400, 0x8800, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x101, 0x1000}, 0x102, 0x7, 0xa35d, 0x2, 0x5, 0x4, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0xb, r0, 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8, 0x3e, 0x7, 0x9, 0x0, 0x5, 0x204, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x40, 0x8d49, 0x3, 0x4, 0x4, 0x7, 0xff40, 0x0, 0xffffffff, 0x0, 0x3}, r1, 0x5, r2, 0x5e06ec91d1681f6e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={0x0, 0x2, 0xffffffffffffffff, 0x3ff}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xca17}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x40000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7a, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008090}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4597292aaa325285}, 0x4048040) 18:51:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 18:51:59 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x500) 18:51:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000805f01807576d37c8b69ab83a6d34c4067de0a42337d2e4715f30d613807468d922a826cde7c4700000000e6514e4d76727b7d8baebf887dd5a11742dd60ccdd8a98a1f0770a6ac97c9cce85e6297a3f8891bd32588d45000000000000000000000000521310ceca3350a2ba25cc6e700b5129b321dca2de15866fbe7a1ed31407"]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000400)={0xb487f0f4c35a6713, 0x7, {0x8d, @usage=0x3, 0x0, 0x5, 0x100000000, 0x3, 0x20, 0x37d, 0x2, @struct={0x3, 0x8}, 0xe4b, 0x1, [0x10001, 0xb5, 0x4, 0x20, 0x7, 0xffff]}, {0x5, @usage=0x10001, 0x0, 0x2, 0x1, 0x800, 0x5, 0x10000, 0x40a, @struct={0xfffffff9}, 0x8, 0x2, [0xffffffffffffffff, 0x0, 0x1ff, 0x8b75, 0xff, 0x5]}, {0x9, @struct={0x1f, 0xffff8000}, 0x0, 0x6, 0x800, 0x9, 0x934, 0x59, 0x8, @usage=0x8, 0x9, 0x9, [0xbcbf, 0xe7, 0x7bf9fd40, 0x6, 0x4, 0x4025]}, {0x0, 0x81, 0x1}}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) 18:51:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)="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", 0x200}, 0x0, 0x0]) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x7, r2, &(0x7f0000000000)="38b12827fdb2896e9d7d52cdc16f06de27b938930a5318", 0x17, 0x5}, &(0x7f0000000080)) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:51:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:51:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:51:59 executing program 1: socketpair(0x10, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000000)) 18:51:59 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x600) [ 1849.092670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1849.093758] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1849.095201] Buffer I/O error on dev sr0, logical block 0, lost async page write 18:51:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9fa4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:51:59 executing program 4: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x6c, 0x22, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x2, 0x2, 0x7f, 0x2, [0x1]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x0, [0x1, 0x5]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x91, 0xc1f, [0x6, 0x80000000, 0x5, 0x1, 0x6, 0xffffffffffff0000]}}, @generic={0x1f, 0x9c, "db17756a7aee37e496fde7154ff5ad026b9fccf5d1571134a860be26de75c2a40d87d17e38cce6f1e1ca857cdcd2b47b37dd6d77299a5430ff97b151cae8f12d0fe2be8ebbf253eb97086d7f55e4da242e56b709f1b27effdb1b09b882c49219f7c2ecb5c4fa4d8e3b288e99f7482e5aca1af84b07829cddc36011d0ccf6c2bb699e9d0bb23a9d5bff870a6663dee4956764ec97fdcb527e1ce47591"}]}, 0x120) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'macsec0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:51:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x4) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x1000, 0x400002) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x11488, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap}, {@timeout={'timeout', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x800}}, {@timeout={'timeout', 0x3d, 0x1}}, {@common=@posixacl}, {@common=@version_u}, {@sq={'sq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x80}}, {@sq={'sq', 0x3d, 0x101}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usb/hiddev#\x00'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsu#\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, ']([]%-:'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsa\x00'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '!.+'}}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) [ 1849.522709] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1849.523920] CPU: 1 UID: 0 PID: 11633 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1849.523951] Tainted: [W]=WARN [ 1849.523957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.523969] Call Trace: [ 1849.523976] [ 1849.523984] dump_stack_lvl+0xfa/0x120 [ 1849.524017] dump_header+0x107/0x950 [ 1849.524050] oom_kill_process+0x278/0xa00 [ 1849.524086] out_of_memory+0x34b/0x1690 [ 1849.524120] ? __pfx_out_of_memory+0x10/0x10 [ 1849.524157] mem_cgroup_out_of_memory+0x164/0x190 [ 1849.524187] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1849.524223] ? mark_held_locks+0x49/0x80 [ 1849.524250] try_charge_memcg+0x81f/0xf30 [ 1849.524283] ? __pfx_try_charge_memcg+0x10/0x10 [ 1849.524318] charge_memcg+0x7b/0x290 [ 1849.524342] __mem_cgroup_charge+0x28/0x90 [ 1849.524370] __handle_mm_fault+0x14b5/0x3310 [ 1849.524401] ? __pfx_perf_trace_lock+0x10/0x10 [ 1849.524424] ? __pfx___handle_mm_fault+0x10/0x10 [ 1849.524450] ? __pte_offset_map_lock+0x190/0x330 [ 1849.524483] ? no_page_table+0xc7/0x220 [ 1849.524509] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1849.524543] handle_mm_fault+0x2c3/0x9b0 [ 1849.524576] __get_user_pages+0x58a/0x2f10 [ 1849.524622] ? __pfx___get_user_pages+0x10/0x10 [ 1849.524654] ? lock_is_held_type+0x9e/0x120 [ 1849.524681] populate_vma_page_range+0x282/0x410 [ 1849.524712] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1849.524740] ? __pfx_find_vma_intersection+0x10/0x10 [ 1849.524765] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1849.524790] __mm_populate+0x100/0x3a0 [ 1849.524821] ? __pfx___mm_populate+0x10/0x10 [ 1849.524852] ? up_write+0x195/0x520 [ 1849.524872] ? lock_is_held_type+0x9e/0x120 [ 1849.524898] __do_sys_mlockall+0x50f/0x5c0 [ 1849.524920] do_syscall_64+0xbf/0x360 [ 1849.524948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.524968] RIP: 0033:0x7fcae51b4b19 [ 1849.524983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.525002] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1849.525021] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1849.525034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1849.525046] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1849.525058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1849.525070] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1849.525099] [ 1849.552643] memory: usage 307200kB, limit 307200kB, failcnt 73 [ 1849.553372] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1849.554105] Memory cgroup stats for /syz5: [ 1849.556282] anon 35635200 [ 1849.557154] file 277663744 [ 1849.557516] kernel 1273856 [ 1849.557858] kernel_stack 65536 [ 1849.558409] pagetables 253952 [ 1849.558781] sec_pagetables 0 [ 1849.559179] percpu 64 [ 1849.559474] sock 0 [ 1849.559735] vmalloc 0 [ 1849.560029] shmem 269262848 [ 1849.560403] file_mapped 8388608 [ 1849.560792] file_dirty 12288 [ 1849.561181] file_writeback 0 [ 1849.561541] swapcached 0 [ 1849.561855] inactive_anon 269303808 [ 1849.562303] active_anon 4096 [ 1849.562669] inactive_file 8192 [ 1849.563052] active_file 4096 [ 1849.563441] unevictable 43978752 [ 1849.563839] slab_reclaimable 824560 [ 1849.564298] slab_unreclaimable 154712 [ 1849.564745] slab 979272 [ 1849.565054] workingset_refault_anon 0 [ 1849.565535] workingset_refault_file 0 [ 1849.565980] workingset_activate_anon 0 [ 1849.566453] workingset_activate_file 0 [ 1849.566908] workingset_restore_anon 0 [ 1849.567386] workingset_restore_file 0 [ 1849.567828] workingset_nodereclaim 0 [ 1849.568286] pgdemote_kswapd 0 [ 1849.568655] pgdemote_direct 0 [ 1849.569022] pgdemote_khugepaged 0 [ 1849.569454] pgdemote_proactive 0 [ 1849.569851] pgscan 298 [ 1849.570178] pgsteal 6 [ 1849.570472] pswpin 0 [ 1849.570754] pswpout 0 [ 1849.571054] pgscan_kswapd 0 [ 1849.571431] pgscan_direct 298 [ 1849.571801] pgscan_khugepaged 0 [ 1849.572213] pgscan_proactive 0 [ 1849.572595] pgsteal_kswapd 0 [ 1849.572955] pgsteal_direct 6 [ 1849.573340] pgsteal_khugepaged 0 [ 1849.573737] pgsteal_proactive 0 [ 1849.574148] pgfault 313383 [ 1849.574482] pgmajfault 0 [ 1849.574795] pgrefill 2592 [ 1849.575152] pgactivate 23093 [ 1849.575512] pgdeactivate 302 [ 1849.575868] pglazyfree 0 [ 1849.576221] pglazyfreed 0 [ 1849.576549] swpin_zero 0 [ 1849.576861] swpout_zero 0 [ 1849.577212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11629,uid=0 [ 1849.578929] Memory cgroup out of memory: Killed process 11629 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56292kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:52:11 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:11 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xa00) 18:52:11 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) 18:52:11 executing program 6: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:52:11 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000500)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/212, 0xd4}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/78, 0x4e}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="e6fff099744f00790091"], 0x68}}], 0x2, 0x40000021, &(0x7f00000005c0)={r3, r4+10000000}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xe8, 0x16, 0x8, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x3}, 0x4, 0x3, 0x53a5, 0x5, 0x5, 0x81, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r0, 0x1) 18:52:11 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/41, &(0x7f0000000100)=0x29) 18:52:11 executing program 3: r0 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ptrace$setsig(0x4203, r2, 0x80, &(0x7f0000000500)={0x22, 0x26297ff9, 0xfffffffb}) r3 = fork() r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x406182, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r4, &(0x7f0000000300)={0xffffffffffffffff, r5, 0x3}) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a8d4ccae8339e2, @perf_bp={&(0x7f0000000240), 0x1}, 0xe26d}, r0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000440)="2db2477a22480934d03ccdeb02695d5647e377ec887d34918811369337de6193381ee4663b3ce970a893689b17e1410994a436fe1e3164728d932237001cbd4b19bbc97dd0ec33f9e7c94d5d2504df92db0346720da10bc248d6bec820694d1659d51a480c434e38917cac1705cedad990acd6b5f67fcf0b4e25d8aee359786a9f2ffa5e939c4a282c4910133cadf2a9d30a63fb61f9ffed0c7e3dcf9e46e98a861414485fa8335ed21956b825e804aec061a21d6ab501a4891e5537aec6") munmap(&(0x7f0000872000/0x1000)=nil, 0x1000) 18:52:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000)=0x5) 18:52:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup(r1) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:52:11 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x6, 0x81, 0x1, 0x0, 0x7, 0x51620, 0x5be0af2677bc73e2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c9fef49, 0x2, @perf_bp={&(0x7f0000000040), 0x7}, 0x40, 0x6, 0x3, 0x6, 0x80000000, 0xc59, 0x1, 0x0, 0x8, 0x0, 0x400}, r1, 0x5, r0, 0x8) process_vm_readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/68, 0x44}], 0x6, &(0x7f0000000900)=[{&(0x7f0000000740)=""/133, 0x85}, {&(0x7f0000000800)=""/220, 0xdc}], 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:52:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560e, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x8, 0x90481) sendfile(r3, r1, &(0x7f0000000180)=0x1ff, 0x2) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x4000) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="b7757ea8300649fbd03c529849b0d933b3de5da1ed498713a156f645a899a6ebe268822dd3af1ff0b163f5d66b0666cfa4664615d2937981e72d09bf96b1785949701b11eefc166f7e9ad83e93d9034fffd06878c668602835910e55ae923642b939298a47d9dc75593e0d291adfdf1afc4988001304ec536ad1224e", 0x7c}], 0x1, 0x1, 0x1ff) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0xd, 0x0, &(0x7f0000000000)) 18:52:11 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5e, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x4) 18:52:11 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0xfa, 0x3, 0x3, 0x0, 0x2, 0x1004, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x9, 0x6}, 0x2a1, 0x1, 0x1, 0x5, 0x0, 0x5, 0x7fff, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x3, r0, 0x8) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:52:11 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xc00) 18:52:11 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:52:11 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)=0x1) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xffffffffffffffff, 0x101000) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x275, r0, &(0x7f00000003c0)="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", 0x1000, 0x2, 0x0, 0x0, r1}, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 1861.476664] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1861.477506] CPU: 0 UID: 0 PID: 11690 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1861.477527] Tainted: [W]=WARN [ 1861.477531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.477540] Call Trace: [ 1861.477545] [ 1861.477550] dump_stack_lvl+0xfa/0x120 [ 1861.477574] dump_header+0x107/0x950 [ 1861.477597] oom_kill_process+0x278/0xa00 [ 1861.477617] out_of_memory+0x34b/0x1690 [ 1861.477640] ? __pfx_out_of_memory+0x10/0x10 [ 1861.477665] mem_cgroup_out_of_memory+0x164/0x190 [ 1861.477685] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1861.477710] ? mark_held_locks+0x49/0x80 [ 1861.477729] try_charge_memcg+0x81f/0xf30 [ 1861.477751] ? __pfx_try_charge_memcg+0x10/0x10 [ 1861.477774] charge_memcg+0x7b/0x290 [ 1861.477790] __mem_cgroup_charge+0x28/0x90 [ 1861.477809] __handle_mm_fault+0x14b5/0x3310 [ 1861.477830] ? __pfx_perf_trace_lock+0x10/0x10 [ 1861.477845] ? __pfx___handle_mm_fault+0x10/0x10 [ 1861.477863] ? __pte_offset_map_lock+0x190/0x330 [ 1861.477885] ? no_page_table+0xc7/0x220 [ 1861.477902] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1861.477925] handle_mm_fault+0x2c3/0x9b0 [ 1861.477947] __get_user_pages+0x58a/0x2f10 [ 1861.477977] ? __pfx___get_user_pages+0x10/0x10 [ 1861.477998] ? lock_is_held_type+0x9e/0x120 [ 1861.478016] populate_vma_page_range+0x282/0x410 [ 1861.478036] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1861.478054] ? __pfx_find_vma_intersection+0x10/0x10 [ 1861.478075] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1861.478091] __mm_populate+0x100/0x3a0 [ 1861.478111] ? __pfx___mm_populate+0x10/0x10 [ 1861.478132] ? up_write+0x195/0x520 [ 1861.478145] ? lock_is_held_type+0x9e/0x120 [ 1861.478162] __do_sys_mlockall+0x50f/0x5c0 [ 1861.478176] do_syscall_64+0xbf/0x360 [ 1861.478195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.478209] RIP: 0033:0x7fcae51b4b19 [ 1861.478219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.478231] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1861.478244] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1861.478253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1861.478260] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1861.478268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.478276] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1861.478296] [ 1861.496787] memory: usage 307200kB, limit 307200kB, failcnt 111 [ 1861.497286] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1861.497766] Memory cgroup stats for /syz5: [ 1861.512228] anon 35639296 [ 1861.512817] file 277659648 [ 1861.513063] kernel 1273856 [ 1861.513649] kernel_stack 65536 [ 1861.513913] pagetables 253952 [ 1861.514306] sec_pagetables 0 [ 1861.514568] percpu 64 [ 1861.514774] sock 0 [ 1861.514966] vmalloc 0 [ 1861.515340] shmem 269262848 [ 1861.515588] file_mapped 8388608 [ 1861.515869] file_dirty 0 [ 1861.516248] file_writeback 0 [ 1861.516500] swapcached 0 [ 1861.516724] inactive_anon 269303808 [ 1861.517022] active_anon 4096 [ 1861.517302] inactive_file 4096 [ 1861.517570] active_file 4096 [ 1861.517816] unevictable 43982848 [ 1861.518110] slab_reclaimable 824320 [ 1861.518402] slab_unreclaimable 154712 [ 1861.518701] slab 979032 [ 1861.518913] workingset_refault_anon 0 [ 1861.519263] workingset_refault_file 0 [ 1861.519567] workingset_activate_anon 0 [ 1861.519873] workingset_activate_file 0 [ 1861.520206] workingset_restore_anon 0 [ 1861.520510] workingset_restore_file 0 [ 1861.520810] workingset_nodereclaim 0 [ 1861.521133] pgdemote_kswapd 0 [ 1861.521384] pgdemote_direct 0 [ 1861.521635] pgdemote_khugepaged 0 [ 1861.521912] pgdemote_proactive 0 [ 1861.522209] pgscan 394 [ 1861.522417] pgsteal 7 [ 1861.522616] pswpin 0 [ 1861.522807] pswpout 0 [ 1861.523005] pgscan_kswapd 0 [ 1861.523273] pgscan_direct 394 [ 1861.523530] pgscan_khugepaged 0 [ 1861.523800] pgscan_proactive 0 [ 1861.524058] pgsteal_kswapd 0 [ 1861.524332] pgsteal_direct 7 [ 1861.524580] pgsteal_khugepaged 0 [ 1861.524850] pgsteal_proactive 0 [ 1861.525139] pgfault 322434 [ 1861.525370] pgmajfault 0 [ 1861.525587] pgrefill 3523 [ 1861.525815] pgactivate 24678 [ 1861.526059] pgdeactivate 398 [ 1861.526330] pglazyfree 0 [ 1861.526547] pglazyfreed 0 [ 1861.526770] swpin_zero 0 [ 1861.526989] swpout_zero 0 [ 1861.527249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11682,uid=0 [ 1861.528434] Memory cgroup out of memory: Killed process 11682 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:52:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:52:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8}, 0x0, 0x0, 0x4bc7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:52:23 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) 18:52:23 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0xfff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 18:52:23 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="040e171db2f6f1debfb3cbeefa725e8916a4cf421e27062c9c4fd37a3d3864204e462bdd830855f5bff5e65d5c78b666713af2897d700fccc84694906fc88f27af22fc78c2587e71e515094b05dbc8c0dd7017f7f95efe5cd9bcfa40e488ab30b4ca2c807605eec59823067243e84d6fa396d9aeb2bad43ae05a2b1dd8950649fc72e362948965b0edc096b5d1dc6817c8957297554af5fbcb021a53a317ea81bf414793b85a32a7485b9dbc1fd59fcfa520bca472c64f8b88e4dec080a023b4a7c3bf70ee05a52b5d3bba9539ef8d19ab5bcab6ad0ab0fe7317096cf801c8a6ded3eef860cb659c1cb3"], 0xe4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x2}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x9, 0x7ff, 0x2, 0x378}, 0x10) close(r0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x20, 0x3f, 0x8, 0x2}]}, 0x10) 18:52:23 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:52:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe00) 18:52:23 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:23 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00030100080006000b8500001e6f408d0000a6e834b50f475d9f41c145e8891f579d954f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035842ecc3782558be4c54c4199e247128c4690b8d070ffe"], 0x5c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r2, &(0x7f00000001c0)=""/135, 0x87, 0xfffffffffffffc00) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x3, 0x4, 0x0, 0x5}, 0x10) close(r0) 18:52:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x81, 0x8, 0x1f, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffe1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8, 0x6, 0x1, 0x2, 0x419, 0x9, 0x3f, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:52:23 executing program 6: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x6611, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:52:23 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000000)) 18:52:23 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xf) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:52:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x2000) 18:52:23 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:52:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0xfe, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='[\x00') r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3001, 0x8000000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x208001, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x111000, 0x126) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x44000000002) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3d, 0x2000) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x81, 0x3, 0x32, 0x0, 0x200, 0x18824, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x15, 0x2, @perf_config_ext={0x7, 0x6}, 0x8000, 0x4bb7, 0x9e7b, 0x3, 0x80000, 0x6, 0x8000, 0x0, 0xfffffff8, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r4, 0xa) pipe(&(0x7f0000000240)={0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000280), &(0x7f00000002c0)={'U-', 0xffff}, 0x16, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x9, 0x0, 0x3, 0x0, 0x7, 0x81406, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x5}, 0x1050, 0x6005, 0xfff, 0x7, 0x400, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x5, r6, 0x2) 18:52:23 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)) 18:52:23 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) r1 = socket(0x3, 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xd62, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1f}, 0xe) [ 1873.497569] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1873.498995] CPU: 1 UID: 0 PID: 11751 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1873.499032] Tainted: [W]=WARN [ 1873.499040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1873.499054] Call Trace: [ 1873.499062] [ 1873.499078] dump_stack_lvl+0xfa/0x120 [ 1873.499116] dump_header+0x107/0x950 [ 1873.499156] oom_kill_process+0x278/0xa00 [ 1873.499192] out_of_memory+0x34b/0x1690 [ 1873.499234] ? __pfx_out_of_memory+0x10/0x10 [ 1873.499296] mem_cgroup_out_of_memory+0x164/0x190 [ 1873.499332] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1873.499376] ? mark_held_locks+0x49/0x80 [ 1873.499409] try_charge_memcg+0x81f/0xf30 [ 1873.499449] ? __pfx_try_charge_memcg+0x10/0x10 [ 1873.499491] charge_memcg+0x7b/0x290 [ 1873.499520] __mem_cgroup_charge+0x28/0x90 [ 1873.499553] __handle_mm_fault+0x14b5/0x3310 [ 1873.499591] ? __pfx_perf_trace_lock+0x10/0x10 [ 1873.499617] ? __pfx___handle_mm_fault+0x10/0x10 [ 1873.499649] ? __pte_offset_map_lock+0x190/0x330 [ 1873.499690] ? no_page_table+0xc7/0x220 [ 1873.499720] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1873.499762] handle_mm_fault+0x2c3/0x9b0 [ 1873.499802] __get_user_pages+0x58a/0x2f10 [ 1873.499859] ? __pfx___get_user_pages+0x10/0x10 [ 1873.499897] ? lock_is_held_type+0x9e/0x120 [ 1873.499929] populate_vma_page_range+0x282/0x410 [ 1873.499967] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1873.500002] ? __pfx_find_vma_intersection+0x10/0x10 [ 1873.500032] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1873.500061] __mm_populate+0x100/0x3a0 [ 1873.500099] ? __pfx___mm_populate+0x10/0x10 [ 1873.500137] ? up_write+0x195/0x520 [ 1873.500161] ? lock_is_held_type+0x9e/0x120 [ 1873.500193] __do_sys_mlockall+0x50f/0x5c0 [ 1873.500219] do_syscall_64+0xbf/0x360 [ 1873.500252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.500276] RIP: 0033:0x7fcae51b4b19 [ 1873.500295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1873.500318] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1873.500340] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1873.500357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1873.500371] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1873.500385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1873.500399] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1873.500437] [ 1873.533134] memory: usage 307200kB, limit 307200kB, failcnt 145 [ 1873.533971] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1873.534846] Memory cgroup stats for /syz5: [ 1873.543856] anon 35639296 [ 1873.544887] file 277659648 [ 1873.545344] kernel 1273856 [ 1873.545755] kernel_stack 65536 [ 1873.546240] pagetables 253952 [ 1873.546681] sec_pagetables 0 [ 1873.547155] percpu 64 [ 1873.547514] sock 0 [ 1873.547839] vmalloc 0 [ 1873.548220] shmem 269262848 [ 1873.548638] file_mapped 8388608 [ 1873.549137] file_dirty 0 [ 1873.549523] file_writeback 0 [ 1873.549951] swapcached 0 [ 1873.550365] inactive_anon 269303808 [ 1873.550877] active_anon 4096 [ 1873.551347] inactive_file 4096 [ 1873.551801] active_file 4096 [ 1873.552263] unevictable 43982848 [ 1873.552745] slab_reclaimable 824320 [ 1873.553291] slab_unreclaimable 154712 [ 1873.553816] slab 979032 [ 1873.554455] workingset_refault_anon 0 [ 1873.555220] workingset_refault_file 0 [ 1873.555899] workingset_activate_anon 0 [ 1873.556491] workingset_activate_file 0 [ 1873.557039] workingset_restore_anon 0 [ 1873.557604] workingset_restore_file 0 [ 1873.558167] workingset_nodereclaim 0 [ 1873.561626] pgdemote_kswapd 0 [ 1873.563630] pgdemote_direct 0 [ 1873.564309] pgdemote_khugepaged 0 [ 1873.564803] pgdemote_proactive 0 [ 1873.565440] pgscan 468 [ 1873.565802] pgsteal 7 [ 1873.566189] pswpin 0 [ 1873.566533] pswpout 0 [ 1873.566884] pgscan_kswapd 0 [ 1873.567348] pgscan_direct 468 [ 1873.567802] pgscan_khugepaged 0 [ 1873.568303] pgscan_proactive 0 [ 1873.568763] pgsteal_kswapd 0 [ 1873.569232] pgsteal_direct 7 [ 1873.569668] pgsteal_khugepaged 0 [ 1873.570181] pgsteal_proactive 0 [ 1873.570656] pgfault 331485 [ 1873.571061] pgmajfault 0 [ 1873.571491] pgrefill 4404 [ 1873.571884] pgactivate 26221 [ 1873.572372] pgdeactivate 473 [ 1873.572836] pglazyfree 0 [ 1873.573261] pglazyfreed 0 [ 1873.573656] swpin_zero 0 [ 1873.574040] swpout_zero 0 [ 1873.574483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11739,uid=0 [ 1873.576580] Memory cgroup out of memory: Killed process 11739 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56284kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:52:33 executing program 6: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1064, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:52:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x282800, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x6, 0x0, 0x6, 0x0, 0x3f, 0x49030, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x95a, 0x1, @perf_config_ext={0x0, 0x1}, 0x1000a, 0x3, 0x5, 0x4787cfa118490f7c, 0x9, 0x26, 0x7, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x3, r0, 0x8) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:52:33 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f7295dca6e8681f1f7d4666d7035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:52:33 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) 18:52:33 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:33 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x60ff) 18:52:33 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0x541b, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @in_args={0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @any, 0x2, 0x1}, 0xe) r5 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0x6611, 0x0) connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x7ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x2}, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='!^]\xde\x00') gettid() 18:52:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000000)) 18:52:33 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x1, 0x3, 0x3f, 0x0, 0x9, 0x54200, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x40400, 0x4, 0x0, 0x8, 0xcf, 0xa4, 0xfff7, 0x0, 0x5, 0x0, 0x882}, r1, 0xd, r0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:52:33 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x9, 0x9, 0x7f, 0x5, 0x0, 0x0, 0x20000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x1f, 0x1ff}, 0x2, 0x786, 0x8, 0x5, 0x46c, 0x5, 0x4, 0x0, 0x80, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r0, 0x2) 18:52:33 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000004640)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@reiserfs_6={0x18, 0x6, {0x6, 0x6, 0x8, 0x80000001, 0x7fff, 0x1f}}, 0xdb710a60e61ccf01) 18:52:33 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0xf5}, @void, @llc={@snap={0x1, 0xaa, '\x00', "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dc6e74168c1f7d4666d7035828c4690bca329e3b008bde5809f62fc864fba7baf0837843c41930735b9eff71a5322bde6ac3c0efa91c84f014c7758c19fd"}}}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:52:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) getpid() 18:52:33 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x9}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000080)={0x0, 0xffff, 0x3}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) io_submit(0x0, 0x4, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000000c0)="1cedd4efe338d1c43f3322b5a356c40e1ff064086fd71719b5e628307e31c424e1affcee231b60dd08e510d826479adf9852eac1195ccaaab1d02dcee9c1b1ff06153378484bc353a6e7582554895a", 0x4f, 0x5, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x7ff, r2, &(0x7f00000001c0), 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000240)="e52f5991e4b48c2afb6b55f7927cdebe2183cab353f24924f031e67dd7f2481c058a361a76e80375", 0x28, 0x60, 0x0, 0x4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1, r4, &(0x7f00000003c0)="0e15482d01c412cce5b54f8ff03a6c526a224f3e8749a51891ae691d9e0aad487b30c07671025543b545f5ab4fccda72c95cf470b954347d02268a97942a5812aeaf1c01cdc47d591a06e390ae18fef89b199bb3ee62b48677fdbd474ad39c19fa284572e64ae0d17ac36214054c3898edbd8d5ca8df0660244d0faa848ed7d3af4f8ac5db492434d89c5c0f885efa54bcf540b59daef3208d93e2749413f419d779cc10a7a9086ab75d4a010517c1d18b406f93fc7765a8389aace6ea602804ab766498061db1ffc5b85eea", 0xcc, 0x1, 0x0, 0x3}]) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000001c0)) readahead(r0, 0x7, 0x0) 18:52:33 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x20000) [ 1883.322296] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1883.323137] CPU: 0 UID: 0 PID: 11808 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1883.323158] Tainted: [W]=WARN [ 1883.323163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1883.323171] Call Trace: [ 1883.323177] [ 1883.323182] dump_stack_lvl+0xfa/0x120 [ 1883.323207] dump_header+0x107/0x950 [ 1883.323230] oom_kill_process+0x278/0xa00 [ 1883.323251] out_of_memory+0x34b/0x1690 [ 1883.323272] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 1883.323288] ? __pfx_out_of_memory+0x10/0x10 [ 1883.323312] mem_cgroup_out_of_memory+0x164/0x190 [ 1883.323333] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1883.323357] ? mark_held_locks+0x49/0x80 [ 1883.323376] try_charge_memcg+0x81f/0xf30 [ 1883.323410] ? __pfx_try_charge_memcg+0x10/0x10 [ 1883.323433] charge_memcg+0x7b/0x290 [ 1883.323449] __mem_cgroup_charge+0x28/0x90 [ 1883.323468] __handle_mm_fault+0x14b5/0x3310 [ 1883.323489] ? __pfx_perf_trace_lock+0x10/0x10 [ 1883.323505] ? __pfx___handle_mm_fault+0x10/0x10 [ 1883.323522] ? __pte_offset_map_lock+0x190/0x330 [ 1883.323544] ? no_page_table+0xc7/0x220 [ 1883.323562] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1883.323585] handle_mm_fault+0x2c3/0x9b0 [ 1883.323607] __get_user_pages+0x58a/0x2f10 [ 1883.323637] ? __pfx___get_user_pages+0x10/0x10 [ 1883.323658] ? lock_is_held_type+0x9e/0x120 [ 1883.323677] populate_vma_page_range+0x282/0x410 [ 1883.323697] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1883.323716] ? __pfx_find_vma_intersection+0x10/0x10 [ 1883.323733] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1883.323749] __mm_populate+0x100/0x3a0 [ 1883.323770] ? __pfx___mm_populate+0x10/0x10 [ 1883.323790] ? up_write+0x195/0x520 [ 1883.323804] ? lock_is_held_type+0x9e/0x120 [ 1883.323820] __do_sys_mlockall+0x50f/0x5c0 [ 1883.323834] do_syscall_64+0xbf/0x360 [ 1883.323853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.323867] RIP: 0033:0x7fcae51b4b19 [ 1883.323878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1883.323891] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1883.323904] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1883.323912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1883.323920] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1883.323928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.323936] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1883.323955] [ 1883.323960] memory: usage 307200kB, limit 307200kB, failcnt 166 [ 1883.346889] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1883.347703] Memory cgroup stats for /syz5: [ 1883.347912] anon 35639296 [ 1883.348651] file 277659648 [ 1883.348888] kernel 1273856 [ 1883.349142] kernel_stack 65536 [ 1883.349410] pagetables 253952 [ 1883.349668] sec_pagetables 0 [ 1883.349919] percpu 64 [ 1883.350140] sock 0 [ 1883.350324] vmalloc 0 [ 1883.350527] shmem 269262848 [ 1883.350770] file_mapped 8388608 [ 1883.351043] file_dirty 0 [ 1883.351291] file_writeback 0 [ 1883.351554] swapcached 0 [ 1883.351773] inactive_anon 269303808 [ 1883.352066] active_anon 4096 [ 1883.352351] inactive_file 4096 [ 1883.352615] active_file 4096 [ 1883.352867] unevictable 43982848 [ 1883.353630] slab_reclaimable 824320 [ 1883.353980] slab_unreclaimable 154712 [ 1883.354458] slab 979032 [ 1883.354679] workingset_refault_anon 0 [ 1883.355052] workingset_refault_file 0 [ 1883.355541] workingset_activate_anon 0 [ 1883.355864] workingset_activate_file 0 [ 1883.356237] workingset_restore_anon 0 [ 1883.356728] workingset_restore_file 0 [ 1883.357039] workingset_nodereclaim 0 [ 1883.357520] pgdemote_kswapd 0 [ 1883.357785] pgdemote_direct 0 [ 1883.358040] pgdemote_khugepaged 0 [ 1883.358341] pgdemote_proactive 0 [ 1883.358623] pgscan 517 [ 1883.358833] pgsteal 7 [ 1883.359036] pswpin 0 [ 1883.359254] pswpout 0 [ 1883.359530] pgscan_kswapd 0 [ 1883.359933] pgscan_direct 517 [ 1883.360214] pgscan_khugepaged 0 [ 1883.360569] pgscan_proactive 0 [ 1883.360971] pgsteal_kswapd 0 [ 1883.361251] pgsteal_direct 7 [ 1883.361507] pgsteal_khugepaged 0 [ 1883.361784] pgsteal_proactive 0 [ 1883.362163] pgfault 340536 [ 1883.362473] pgmajfault 0 [ 1883.362697] pgrefill 5316 [ 1883.362961] pgactivate 27600 [ 1883.363369] pgdeactivate 523 [ 1883.363633] pglazyfree 0 [ 1883.363855] pglazyfreed 0 [ 1883.364111] swpin_zero 0 [ 1883.364374] swpout_zero 0 [ 1883.364665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11801,uid=0 [ 1883.366204] Memory cgroup out of memory: Killed process 11801 (syz-executor.5) total-vm:93420kB, anon-rss:34964kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:52:41 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:41 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1}, 0xe) 18:52:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x5, 0x7, 0x9, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000040)}, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0xff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, r0, 0x0) 18:52:41 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0xfffffffffffffffa, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:52:41 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x170) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d19880000000065a169000000000000000000003ef2cbfe189b7fd78066c021e156c3e3dff15070c4fd31a4284858560b6c7cd1e321a039311e33c48e59deee40215cce9c0f96317908cb861395ec3407a955ab897be0fb4910d3c7dc1d7e314feb96c5f2e2092a1400c8b9262da1c71032c76b63d4b9e423e50682d377a38befc1d5d56d48087fda64fa477dd9b9abb15558eb48a3fd42fe6b0458d1857e37632c175d76c1c5c9c05d16c9"]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@local]}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:52:41 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x40000) 18:52:41 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2e, 0x0, 0x7, 0x4, 0x0, 0x8, 0xc86a8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x4, 0x1}, 0xa540, 0x9, 0x8000, 0x2, 0x7, 0x6, 0x100, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r0, 0x1) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setstatus(r2, 0x4, 0x400) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) r5 = socket$inet6(0xa, 0x4, 0xff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000240)={0x0, @aes256, 0x0, @desc3}) io_submit(r4, 0x3, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad4e33368df829279405f695d95e729660f02a46d2baad5ca601a8bfa67d73d0e52647ab4f5a4818e48ac6ee62c826ac6039617d53962493820c1e4a292e4d24f3b9558d06103f275f34db11b5e63303b3a4421335241a40b0362a3af98605a766d25d001be3b1356ebeb2a0416056bb627ad05011e7bf102df9f34f2470dc0430667a9d93d2477035482da457457524cc", 0x200}, 0x0, 0x0]) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r4, 0x2, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000080)="d7a5dbd4765e315693f41a0b554c890fa71d1d9336c30d2f3088a278d55806dfdc482276028245fcb7e8870b43982566627048d916e3798d66f54f76b942f95cdecea4b8d23e6f127851bb8065269cb035d03d7f0f264367ef2a5c1484300a2b2ccc0e5fe235a550b211d99dd6d9f9b47837edaaa1932a28c99285e8811f20df55fc70e904b7c5b141348377e0c5265079cae280d55f2b957b786abe62d2949166b5780b9a291e05002b74b949f7bb211b7b14681867d722a00a95d2b37ace48895579b10962998dcd9e12125012932ceea10aa28b4e6dbefe46", 0xda, 0xfff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f00000003c0)="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", 0x1000, 0x1, 0x0, 0x3}]) 18:52:42 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x3ff, 0x0) 18:52:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r0, 0x9) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) 18:52:42 executing program 6: modify_ldt$read_default(0x2, &(0x7f0000000040)=""/150, 0x96) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 1891.712630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1891.713949] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1891.715346] Buffer I/O error on dev sr0, logical block 0, lost async page write 18:52:42 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) close(r0) 18:52:42 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x187, 0x8}) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) madvise(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x0) 18:52:42 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x60000) 18:52:42 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x100000000000000) r2 = getpid() r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x81, 0x3f, 0xff, 0x0, 0xfff, 0x40000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x0, 0xe000000000000000}, 0x80, 0x7ff, 0xffffffff, 0x1, 0x7, 0x1, 0x8, 0x0, 0x401, 0x0, 0x6}, r2, 0xc, r3, 0xb) fcntl$setflags(r0, 0x2, 0x1) 18:52:42 executing program 1: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0xe8) open(&(0x7f0000000200)='./file0\x00', 0x38100, 0x10) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0xffc8, @any, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x49ab, @none, 0xdd4}, 0xe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @none, 0x2, 0x2}, 0xe) [ 1892.023409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.023925] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1892.024633] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1892.106717] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1892.107602] CPU: 0 UID: 0 PID: 11846 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1892.107623] Tainted: [W]=WARN [ 1892.107627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.107635] Call Trace: [ 1892.107641] [ 1892.107646] dump_stack_lvl+0xfa/0x120 [ 1892.107669] dump_header+0x107/0x950 [ 1892.107692] oom_kill_process+0x278/0xa00 [ 1892.107712] out_of_memory+0x34b/0x1690 [ 1892.107735] ? __pfx_out_of_memory+0x10/0x10 [ 1892.107759] mem_cgroup_out_of_memory+0x164/0x190 [ 1892.107780] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1892.107804] ? mark_held_locks+0x49/0x80 [ 1892.107823] try_charge_memcg+0x81f/0xf30 [ 1892.107846] ? __pfx_try_charge_memcg+0x10/0x10 [ 1892.107868] charge_memcg+0x7b/0x290 [ 1892.107885] __mem_cgroup_charge+0x28/0x90 [ 1892.107903] __handle_mm_fault+0x14b5/0x3310 [ 1892.107925] ? __pfx_perf_trace_lock+0x10/0x10 [ 1892.107940] ? __pfx___handle_mm_fault+0x10/0x10 [ 1892.107957] ? __pte_offset_map_lock+0x190/0x330 [ 1892.107980] ? no_page_table+0xc7/0x220 [ 1892.107997] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1892.108020] handle_mm_fault+0x2c3/0x9b0 [ 1892.108041] __get_user_pages+0x58a/0x2f10 [ 1892.108076] ? __pfx___get_user_pages+0x10/0x10 [ 1892.108097] ? lock_is_held_type+0x9e/0x120 [ 1892.108116] populate_vma_page_range+0x282/0x410 [ 1892.108140] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1892.108159] ? __pfx_find_vma_intersection+0x10/0x10 [ 1892.108176] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1892.108192] __mm_populate+0x100/0x3a0 [ 1892.108212] ? __pfx___mm_populate+0x10/0x10 [ 1892.108233] ? up_write+0x195/0x520 [ 1892.108247] ? lock_is_held_type+0x9e/0x120 [ 1892.108264] __do_sys_mlockall+0x50f/0x5c0 [ 1892.108278] do_syscall_64+0xbf/0x360 [ 1892.108297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.108311] RIP: 0033:0x7fcae51b4b19 [ 1892.108321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.108333] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1892.108346] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1892.108354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1892.108362] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1892.108369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1892.108377] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1892.108396] [ 1892.127378] memory: usage 307200kB, limit 307200kB, failcnt 190 [ 1892.127872] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1892.128389] Memory cgroup stats for /syz5: [ 1892.149408] anon 35643392 [ 1892.149988] file 277655552 [ 1892.150256] kernel 1273856 [ 1892.150507] kernel_stack 65536 [ 1892.150773] pagetables 253952 [ 1892.151027] sec_pagetables 0 [ 1892.151306] percpu 64 [ 1892.151519] sock 0 [ 1892.151702] vmalloc 0 [ 1892.151905] shmem 269262848 [ 1892.152164] file_mapped 8388608 [ 1892.152433] file_dirty 0 [ 1892.152652] file_writeback 0 [ 1892.152905] swapcached 0 [ 1892.153155] inactive_anon 269303808 [ 1892.153455] active_anon 4096 [ 1892.153705] inactive_file 4096 [ 1892.153971] active_file 0 [ 1892.154222] unevictable 43986944 [ 1892.154502] slab_reclaimable 824080 [ 1892.154804] slab_unreclaimable 154712 [ 1892.155130] slab 978792 [ 1892.155346] workingset_refault_anon 0 [ 1892.155676] workingset_refault_file 0 [ 1892.155987] workingset_activate_anon 0 [ 1892.156318] workingset_activate_file 0 [ 1892.156634] workingset_restore_anon 0 [ 1892.156942] workingset_restore_file 0 [ 1892.157269] workingset_nodereclaim 0 [ 1892.157576] pgdemote_kswapd 0 [ 1892.157834] pgdemote_direct 0 [ 1892.158118] pgdemote_khugepaged 0 [ 1892.158404] pgdemote_proactive 0 [ 1892.158684] pgscan 549 [ 1892.158895] pgsteal 8 [ 1892.159124] pswpin 0 [ 1892.159324] pswpout 0 [ 1892.159533] pgscan_kswapd 0 [ 1892.159775] pgscan_direct 549 [ 1892.160029] pgscan_khugepaged 0 [ 1892.160324] pgscan_proactive 0 [ 1892.160587] pgsteal_kswapd 0 [ 1892.160839] pgsteal_direct 8 [ 1892.161111] pgsteal_khugepaged 0 [ 1892.161387] pgsteal_proactive 0 [ 1892.161658] pgfault 349588 [ 1892.161890] pgmajfault 0 [ 1892.162139] pgrefill 6108 [ 1892.162369] pgactivate 28990 [ 1892.162624] pgdeactivate 556 [ 1892.162873] pglazyfree 0 [ 1892.163117] pglazyfreed 0 [ 1892.163348] swpin_zero 0 [ 1892.163582] swpout_zero 0 [ 1892.163808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11840,uid=0 [ 1892.165020] Memory cgroup out of memory: Killed process 11840 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:52:54 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb3ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bde07a41f1fd6c2cf47288f03000000d7035628c4690bca329e3b8979f6091a2c0c15553d89f26c6574baa665a43f21e7e7ddef670200000000000000"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:52:54 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x80000) 18:52:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:52:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000870000/0x4000)=nil) 18:52:54 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002fc0)={0x5, 0x80, 0x7f, 0x6, 0x7, 0x8, 0x0, 0x4, 0x12, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1b, 0x2, @perf_bp={&(0x7f0000002f80), 0x8}, 0x4000, 0x2, 0x14dc, 0x6, 0x7f, 0x200, 0x5e, 0x0, 0x400, 0x0, 0x2}, 0x0, 0xd, r0, 0x9) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) recvmmsg$unix(r2, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/177, 0xb1}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/164, 0xa4}], 0x4, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000500)=""/127, 0x7f}], 0x2}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f0000000940)=""/125, 0x7d}, {&(0x7f00000009c0)=""/218, 0xda}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/89, 0x59}, {&(0x7f0000001b40)=""/49, 0x31}], 0x9, &(0x7f0000001c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001d00)=""/181, 0xb5}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000002e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x4, 0x40000000, &(0x7f0000002f40)) 18:52:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x9, @none, 0x7, 0x2}, 0xe) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x178) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0xd, 0x0, &(0x7f0000004640)=0xffffffffffffff2c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000000c0)) 18:52:54 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:54 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:52:54 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x80000001, 0x6d) 18:52:54 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x8400) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x3) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:52:54 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="000000666938be40282e0d7c3eab6cb8c2260482d77619b3ab2c9689e7309088828d30ff991ae40b5bc155f6e3543c27dd03ce7b56c8a02b6bb3c764cd80b9e4edffea6ae177e9b515fda3069b2c0d4dd190f981dc3c51b2f7fef24c9dc3e52666a835ac62c27283c930a4448987393b00db8d07"]) 18:52:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x101, 0x1}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:52:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4201, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8001, @none}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)=0xe) 18:52:54 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xa0000) [ 1905.083187] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1905.084657] CPU: 1 UID: 0 PID: 11903 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1905.084693] Tainted: [W]=WARN [ 1905.084701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.084715] Call Trace: [ 1905.084724] [ 1905.084733] dump_stack_lvl+0xfa/0x120 [ 1905.084770] dump_header+0x107/0x950 [ 1905.084810] oom_kill_process+0x278/0xa00 [ 1905.084846] out_of_memory+0x34b/0x1690 [ 1905.084888] ? __pfx_out_of_memory+0x10/0x10 [ 1905.084933] mem_cgroup_out_of_memory+0x164/0x190 [ 1905.084969] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1905.085013] ? mark_held_locks+0x49/0x80 [ 1905.085046] try_charge_memcg+0x81f/0xf30 [ 1905.085093] ? __pfx_try_charge_memcg+0x10/0x10 [ 1905.085134] charge_memcg+0x7b/0x290 [ 1905.085163] __mem_cgroup_charge+0x28/0x90 [ 1905.085196] __handle_mm_fault+0x14b5/0x3310 [ 1905.085233] ? __pfx_perf_trace_lock+0x10/0x10 [ 1905.085260] ? __pfx___handle_mm_fault+0x10/0x10 [ 1905.085291] ? __pte_offset_map_lock+0x190/0x330 [ 1905.085331] ? no_page_table+0xc7/0x220 [ 1905.085362] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1905.085403] handle_mm_fault+0x2c3/0x9b0 [ 1905.085442] __get_user_pages+0x58a/0x2f10 [ 1905.085498] ? __pfx___get_user_pages+0x10/0x10 [ 1905.085537] ? lock_is_held_type+0x9e/0x120 [ 1905.085569] populate_vma_page_range+0x282/0x410 [ 1905.085607] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1905.085641] ? __pfx_find_vma_intersection+0x10/0x10 [ 1905.085671] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1905.085700] __mm_populate+0x100/0x3a0 [ 1905.085737] ? __pfx___mm_populate+0x10/0x10 [ 1905.085775] ? up_write+0x195/0x520 [ 1905.085799] ? lock_is_held_type+0x9e/0x120 [ 1905.085831] __do_sys_mlockall+0x50f/0x5c0 [ 1905.085856] do_syscall_64+0xbf/0x360 [ 1905.085890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.085915] RIP: 0033:0x7fcae51b4b19 [ 1905.085933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.085956] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1905.085982] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1905.085999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1905.086013] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1905.086027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1905.086041] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1905.086076] [ 1905.122891] memory: usage 307200kB, limit 307200kB, failcnt 213 [ 1905.125394] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1905.126319] Memory cgroup stats for /syz5: [ 1905.131214] anon 35643392 [ 1905.132466] file 277655552 [ 1905.132889] kernel 1273856 [ 1905.133354] kernel_stack 65536 [ 1905.133826] pagetables 253952 [ 1905.134312] sec_pagetables 0 [ 1905.134760] percpu 64 [ 1905.135153] sock 0 [ 1905.135483] vmalloc 0 [ 1905.135850] shmem 269262848 [ 1905.136312] file_mapped 8388608 [ 1905.136791] file_dirty 0 [ 1905.137213] file_writeback 0 [ 1905.137673] swapcached 0 [ 1905.138067] inactive_anon 269303808 [ 1905.138642] active_anon 4096 [ 1905.139293] inactive_file 4096 [ 1905.139784] active_file 0 [ 1905.140392] unevictable 43986944 [ 1905.140897] slab_reclaimable 824080 [ 1905.141592] slab_unreclaimable 154712 [ 1905.142178] slab 978792 [ 1905.142566] workingset_refault_anon 0 [ 1905.143154] workingset_refault_file 0 [ 1905.143712] workingset_activate_anon 0 [ 1905.144305] workingset_activate_file 0 [ 1905.144864] workingset_restore_anon 0 [ 1905.145440] workingset_restore_file 0 [ 1905.145985] workingset_nodereclaim 0 [ 1905.146557] pgdemote_kswapd 0 [ 1905.147015] pgdemote_direct 0 [ 1905.147512] pgdemote_khugepaged 0 [ 1905.148036] pgdemote_proactive 0 [ 1905.148569] pgscan 578 [ 1905.148944] pgsteal 8 [ 1905.149331] pswpin 0 [ 1905.149681] pswpout 0 [ 1905.150038] pgscan_kswapd 0 [ 1905.150502] pgscan_direct 578 [ 1905.150958] pgscan_khugepaged 0 [ 1905.151504] pgscan_proactive 0 [ 1905.151993] pgsteal_kswapd 0 [ 1905.152479] pgsteal_direct 8 [ 1905.152931] pgsteal_khugepaged 0 [ 1905.153454] pgsteal_proactive 0 [ 1905.153933] pgfault 358640 [ 1905.154379] pgmajfault 0 [ 1905.154776] pgrefill 7060 [ 1905.155213] pgactivate 30487 [ 1905.155679] pgdeactivate 576 [ 1905.156158] pglazyfree 0 [ 1905.156557] pglazyfreed 0 [ 1905.156961] swpin_zero 0 [ 1905.157386] swpout_zero 0 [ 1905.157804] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11897,uid=0 [ 1905.159975] Memory cgroup out of memory: Killed process 11897 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:53:04 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = fork() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3f, 0x0, 0x3f, 0x40, 0x0, 0x83, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x20c1, 0x4, 0xffffffff, 0x3, 0x4, 0x7, 0x9, 0x0, 0x3f, 0x0, 0x9}, r1, 0x2, r0, 0x0) 18:53:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x74) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7ff, @none, 0x8}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @any, 0x665a}, 0xe) 18:53:04 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:04 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:04 executing program 0: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xa2fd, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x35}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x807) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x68}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20004085) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:04 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff968b113cf6517f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e868e23116c31f1f7d4666d7035828c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x539c80, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200000, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7a6}}, './file0\x00'}) bind$packet(r6, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x1, 0xe2}, 0x14) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000280)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) setsockopt$inet6_buf(r3, 0x29, 0x0, 0x0, 0xfffffffffffffed7) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0) ioctl$TUNSETOWNER(r7, 0x400454cc, 0x0) close(r0) 18:53:04 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xc0000) 18:53:04 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) 18:53:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6}, 0xe) r2 = socket(0x2a, 0x80000, 0x2) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) listen(0xffffffffffffffff, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) getpeername$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) 18:53:04 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000004640)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe) 18:53:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=@isofs={0x14, 0x1, {0x4, 0x73, 0x401, 0x101, 0x7fff, 0x4}}, 0x2) r0 = getpid() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000001480)=""/178, 0xb2}, {&(0x7f0000000240)=""/255}, {&(0x7f0000001640)=""/246}], 0x2, &(0x7f00000000c0)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000000480)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x81, 0x5b, 0x8, 0x0, 0x1, 0x880, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8a46, 0x5, @perf_config_ext={0x8, 0x6}, 0x240, 0x401, 0x6, 0x3, 0x1, 0x1, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffe1}, r0, 0x0, 0xffffffffffffffff, 0x0) 18:53:04 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x246402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:53:04 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x100010, r0, 0xc7205000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000040)=[{r1, 0x47}, {r2}, {r0, 0x40}, {r3, 0x8001}], 0x4, 0x8000) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:04 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe0000) 18:53:04 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x7, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x48}}, 0x4004000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) write(r1, &(0x7f0000000000)="885420c0bbd6ccbb2cabcf3b0504f673982c01983036f0c99d0d8364d5459ce6ffeb23768f480c07f33b80470c2fbcb9e2e93d4a875f5c94cd2a069c07ff200e6ecfb19165e21a19c5592464ff2c9f4aa2afd5f4cc406419e7743cbabcb885b35165b9a49d9530ee79cbcdb699c115e67699ea9c17a168ac5779699315f8d03ce44f1a9c635a07729e499a3b421499984d2e19cac884d1429abe83d3d5064ae718e9f93b90a43130373f52800b2a9ffa3acb85df9f8b32180bd20c68eb50f3d57faffb7ee92dd7d740fa24ab18d74ef78ec29e74fa82ffccc38e963ae5000506a7d89f41bb6c10de12d5de962bac61", 0xef) dup(r0) 18:53:04 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@remote, @local]}) close(r0) [ 1914.705355] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1914.706837] CPU: 1 UID: 0 PID: 11957 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1914.706873] Tainted: [W]=WARN [ 1914.706881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1914.706894] Call Trace: [ 1914.706903] [ 1914.706913] dump_stack_lvl+0xfa/0x120 [ 1914.706950] dump_header+0x107/0x950 [ 1914.706990] oom_kill_process+0x278/0xa00 [ 1914.707027] out_of_memory+0x34b/0x1690 [ 1914.707075] ? __pfx_out_of_memory+0x10/0x10 [ 1914.707120] mem_cgroup_out_of_memory+0x164/0x190 [ 1914.707156] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1914.707200] ? mark_held_locks+0x49/0x80 [ 1914.707233] try_charge_memcg+0x81f/0xf30 [ 1914.707273] ? __pfx_try_charge_memcg+0x10/0x10 [ 1914.707315] charge_memcg+0x7b/0x290 [ 1914.707344] __mem_cgroup_charge+0x28/0x90 [ 1914.707378] __handle_mm_fault+0x14b5/0x3310 [ 1914.707415] ? __pfx_perf_trace_lock+0x10/0x10 [ 1914.707442] ? __pfx___handle_mm_fault+0x10/0x10 [ 1914.707473] ? __pte_offset_map_lock+0x190/0x330 [ 1914.707514] ? no_page_table+0xc7/0x220 [ 1914.707545] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1914.707587] handle_mm_fault+0x2c3/0x9b0 [ 1914.707626] __get_user_pages+0x58a/0x2f10 [ 1914.707682] ? __pfx___get_user_pages+0x10/0x10 [ 1914.707721] ? lock_is_held_type+0x9e/0x120 [ 1914.707764] populate_vma_page_range+0x282/0x410 [ 1914.707802] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1914.707837] ? __pfx_find_vma_intersection+0x10/0x10 [ 1914.707867] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1914.707897] __mm_populate+0x100/0x3a0 [ 1914.707934] ? __pfx___mm_populate+0x10/0x10 [ 1914.707972] ? up_write+0x195/0x520 [ 1914.707997] ? lock_is_held_type+0x9e/0x120 [ 1914.708028] __do_sys_mlockall+0x50f/0x5c0 [ 1914.708054] do_syscall_64+0xbf/0x360 [ 1914.708087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.708111] RIP: 0033:0x7fcae51b4b19 [ 1914.708130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1914.708153] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1914.708175] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1914.708192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1914.708206] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1914.708220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.708234] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1914.708269] [ 1914.744938] memory: usage 307200kB, limit 307200kB, failcnt 234 [ 1914.747401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1914.748365] Memory cgroup stats for /syz5: [ 1914.752804] anon 35647488 [ 1914.753881] file 277651456 [ 1914.754478] kernel 1273856 [ 1914.754905] kernel_stack 65536 [ 1914.755418] pagetables 253952 [ 1914.755887] sec_pagetables 0 [ 1914.756368] percpu 64 [ 1914.756727] sock 0 [ 1914.757056] vmalloc 0 [ 1914.757454] shmem 269262848 [ 1914.757882] file_mapped 8388608 [ 1914.758399] file_dirty 0 [ 1914.758797] file_writeback 0 [ 1914.759284] swapcached 0 [ 1914.759681] inactive_anon 269303808 [ 1914.760264] active_anon 4096 [ 1914.760720] inactive_file 0 [ 1914.761187] active_file 0 [ 1914.761597] unevictable 43884544 [ 1914.762127] slab_reclaimable 823840 [ 1914.762657] slab_unreclaimable 154712 [ 1914.763245] slab 978552 [ 1914.763635] workingset_refault_anon 0 [ 1914.764239] workingset_refault_file 0 [ 1914.764790] workingset_activate_anon 0 [ 1914.765391] workingset_activate_file 0 [ 1914.765957] workingset_restore_anon 0 [ 1914.766544] workingset_restore_file 0 [ 1914.767145] workingset_nodereclaim 0 [ 1914.767689] pgdemote_kswapd 0 [ 1914.768208] pgdemote_direct 0 [ 1914.768671] pgdemote_khugepaged 0 [ 1914.769227] pgdemote_proactive 0 [ 1914.769727] pgscan 579 [ 1914.770147] pgsteal 9 [ 1914.770516] pswpin 0 [ 1914.770867] pswpout 0 [ 1914.771284] pgscan_kswapd 0 [ 1914.771720] pgscan_direct 579 [ 1914.772243] pgscan_khugepaged 0 [ 1914.772731] pgscan_proactive 0 [ 1914.773238] pgsteal_kswapd 0 [ 1914.773691] pgsteal_direct 9 [ 1914.774188] pgsteal_khugepaged 0 [ 1914.774682] pgsteal_proactive 0 [ 1914.775218] pgfault 367693 [ 1914.775640] pgmajfault 0 [ 1914.776046] pgrefill 7900 [ 1914.776501] pgactivate 31893 [ 1914.776959] pgdeactivate 576 [ 1914.777464] pglazyfree 0 [ 1914.777864] pglazyfreed 0 [ 1914.778318] swpin_zero 0 [ 1914.778717] swpout_zero 0 [ 1914.779168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11952,uid=0 [ 1914.781348] Memory cgroup out of memory: Killed process 11952 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56288kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:53:14 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:14 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f1ff964b113cf65f0be070000007a9636645f0ae309ae82067afee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b000000ca5104ffffffffffffeeb7f3c1a32619111b9cd78297ad135ba3a06a515327a4a59c2dcafdfe76e700fca42302cd7aeb5cb3f329860d31e637810199654136e8c3ab26af4194651c4cb807d76871202d1703d9"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0x81}, 0x14) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) 18:53:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) 18:53:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) syncfs(r0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 18:53:14 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1c0000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xfffffffc, 0x4) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:14 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x2c, 0x1d, 0x14, 0x7, 0x6, 0x6, 0x6, 0xa5, 0x1}) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x40, 0x80, 0xe0, 0x0, 0x401, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0x6, 0x7}, 0x40106, 0x1, 0x1000, 0x7, 0x101, 0x2, 0xd59, 0x0, 0xfffffffb, 0x0, 0x1}, 0x0, 0x1, r1, 0x2) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46c59, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000004640)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8d) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7, 0x5, 0x8}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0xf0, 0x40, 0x81, 0x0, 0x101, 0xa002, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0xffff}, 0x80, 0x2, 0x8, 0x3, 0x3, 0xfe, 0x453, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r4, 0x2) r6 = socket$unix(0x1, 0x2, 0x0) shutdown(r6, 0x1) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0) ioctl$FITHAW(r7, 0xc0045878) 18:53:14 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x100000) 18:53:15 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0xff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x513c, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffc00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) munmap(&(0x7f0000872000/0x3000)=nil, 0x3000) 18:53:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1000, @none, 0x7}, 0xe) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000b1000000002e2f66696c653000"]) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe) readahead(0xffffffffffffffff, 0x1, 0x6) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:53:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe) 18:53:15 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) close(r0) 18:53:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:15 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe6ef7f) 18:53:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9a5, 0x521600) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) kcmp(r0, 0xffffffffffffffff, 0x0, r1, r2) [ 1925.163395] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1925.165304] CPU: 1 UID: 0 PID: 12009 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1925.165344] Tainted: [W]=WARN [ 1925.165353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.165368] Call Trace: [ 1925.165378] [ 1925.165388] dump_stack_lvl+0xfa/0x120 [ 1925.165428] dump_header+0x107/0x950 [ 1925.165470] oom_kill_process+0x278/0xa00 [ 1925.165510] out_of_memory+0x34b/0x1690 [ 1925.165555] ? __pfx_out_of_memory+0x10/0x10 [ 1925.165603] mem_cgroup_out_of_memory+0x164/0x190 [ 1925.165643] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1925.165690] ? mark_held_locks+0x49/0x80 [ 1925.165726] try_charge_memcg+0x81f/0xf30 [ 1925.165769] ? __pfx_try_charge_memcg+0x10/0x10 [ 1925.165815] charge_memcg+0x7b/0x290 [ 1925.165848] __mem_cgroup_charge+0x28/0x90 [ 1925.165884] __handle_mm_fault+0x14b5/0x3310 [ 1925.165923] ? __pfx_perf_trace_lock+0x10/0x10 [ 1925.165952] ? __pfx___handle_mm_fault+0x10/0x10 [ 1925.165985] ? __pte_offset_map_lock+0x190/0x330 [ 1925.166029] ? no_page_table+0xc7/0x220 [ 1925.166062] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1925.166114] handle_mm_fault+0x2c3/0x9b0 [ 1925.166156] __get_user_pages+0x58a/0x2f10 [ 1925.166217] ? __pfx___get_user_pages+0x10/0x10 [ 1925.166258] ? lock_is_held_type+0x9e/0x120 [ 1925.166293] populate_vma_page_range+0x282/0x410 [ 1925.166334] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1925.166370] ? __pfx_find_vma_intersection+0x10/0x10 [ 1925.166403] ? __mm_populate+0x1ee/0x3a0 [ 1925.166447] __mm_populate+0x100/0x3a0 [ 1925.166487] ? __pfx___mm_populate+0x10/0x10 [ 1925.166528] ? up_write+0x195/0x520 [ 1925.166554] ? lock_is_held_type+0x9e/0x120 [ 1925.166587] __do_sys_mlockall+0x50f/0x5c0 [ 1925.166615] do_syscall_64+0xbf/0x360 [ 1925.166651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.166677] RIP: 0033:0x7fcae51b4b19 [ 1925.166697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.166722] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1925.166745] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1925.166763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1925.166778] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1925.166794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1925.166809] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1925.166847] [ 1925.209934] memory: usage 307200kB, limit 307200kB, failcnt 259 [ 1925.212839] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1925.213958] Memory cgroup stats for /syz5: [ 1925.284161] anon 35647488 [ 1925.284763] file 277651456 [ 1925.285005] kernel 1273856 [ 1925.285294] kernel_stack 65536 [ 1925.285563] pagetables 253952 [ 1925.285829] sec_pagetables 0 [ 1925.286106] percpu 64 [ 1925.286318] sock 0 [ 1925.286506] vmalloc 0 [ 1925.286716] shmem 269262848 [ 1925.286964] file_mapped 8388608 [ 1925.287267] file_dirty 0 [ 1925.287517] file_writeback 0 [ 1925.287775] swapcached 0 [ 1925.288031] inactive_anon 269303808 [ 1925.288354] active_anon 4096 [ 1925.288635] inactive_file 0 [ 1925.288911] active_file 0 [ 1925.289197] unevictable 43991040 [ 1925.289508] slab_reclaimable 823840 [ 1925.289843] slab_unreclaimable 154712 [ 1925.290220] slab 978552 [ 1925.290462] workingset_refault_anon 0 [ 1925.290813] workingset_refault_file 0 [ 1925.291200] workingset_activate_anon 0 [ 1925.291552] workingset_activate_file 0 [ 1925.291921] workingset_restore_anon 0 [ 1925.292297] workingset_restore_file 0 [ 1925.292642] workingset_nodereclaim 0 [ 1925.292987] pgdemote_kswapd 0 [ 1925.293306] pgdemote_direct 0 [ 1925.293594] pgdemote_khugepaged 0 [ 1925.293912] pgdemote_proactive 0 [ 1925.294253] pgscan 579 [ 1925.294491] pgsteal 9 [ 1925.294722] pswpin 0 [ 1925.294946] pswpout 0 [ 1925.295202] pgscan_kswapd 0 [ 1925.295476] pgscan_direct 579 [ 1925.295766] pgscan_khugepaged 0 [ 1925.296054] pgscan_proactive 0 [ 1925.296378] pgsteal_kswapd 0 [ 1925.296663] pgsteal_direct 9 [ 1925.296946] pgsteal_khugepaged 0 [ 1925.297284] pgsteal_proactive 0 [ 1925.297586] pgfault 376746 [ 1925.297853] pgmajfault 0 [ 1925.298132] pgrefill 8792 [ 1925.298387] pgactivate 33252 [ 1925.298669] pgdeactivate 576 [ 1925.298955] pglazyfree 0 [ 1925.299233] pglazyfreed 0 [ 1925.299490] swpin_zero 0 [ 1925.299740] swpout_zero 0 [ 1925.300007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12008,uid=0 [ 1925.301376] Memory cgroup out of memory: Killed process 12008 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:53:26 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:26 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mlock2(&(0x7f0000871000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:26 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7) 18:53:26 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe6ff7f) 18:53:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) r2 = getpid() process_vm_readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/190, 0xbe}], 0x2, &(0x7f0000000200)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4085, 0xff5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) 18:53:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x84001, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x901100, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xa8, 0x3f, 0x8, 0x0, 0x0, 0x3, 0x101, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000080), 0xa}, 0x2, 0x80000001, 0x2, 0x6, 0x7, 0x2, 0x2, 0x0, 0x4639, 0x0, 0x4}, 0xffffffffffffffff, 0x1, r1, 0x3) 18:53:26 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0xab, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:53:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000040)={{0x6, 0x8}, 0x100, './file0\x00'}) 18:53:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xff, @none, 0xe}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) accept(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80) 18:53:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x2, 0x7, 0x9, 0x0, 0x7ff, 0x441c2, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp, 0x20, 0x4, 0xfffeffff, 0x7, 0x101, 0x7, 0x1, 0x0, 0x8, 0x0, 0xffffffffffff6620}, r0, 0x10, r1, 0xb) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:26 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/199, 0xc7}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x7, 0xffffffffffffffff, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x48402, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) read(r1, &(0x7f0000000240)=""/102, 0x66) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002fc0), 0x4100, 0x0) perf_event_open(&(0x7f0000003500)={0x3, 0x80, 0x5d, 0x2, 0x3, 0x1, 0x0, 0x1, 0x400f, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x4914, 0x1ff}, 0x400, 0x3, 0x2, 0x1, 0x4ec, 0x20, 0x0, 0x0, 0x87c, 0x0, 0x3}, 0x0, 0xa, r0, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/239, 0xef}, {&(0x7f00000013c0)=""/10, 0xa}, {&(0x7f0000001400)=""/82, 0x52}], 0x6, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001600)=""/163, 0xa3}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/106, 0x6a}, {&(0x7f0000002740)=""/69, 0x45}], 0x4, &(0x7f0000002800)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000002900), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002980)=""/202, 0xca}, {&(0x7f0000002a80)=""/203, 0xcb}, {&(0x7f0000002b80)=""/118, 0x76}, {&(0x7f0000002c00)=""/33, 0x21}], 0x4, &(0x7f0000003580)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000008000dfffffff01000000af5292", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}, {{&(0x7f0000002d00)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/81, 0x51}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002e40)=""/31, 0x1f}, {&(0x7f0000002e80)=""/48, 0x30}, {&(0x7f0000002ec0)=""/253, 0xfd}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/52, 0x34}, {&(0x7f0000003040)=""/74, 0x4a}, {&(0x7f00000030c0)}, {&(0x7f0000003100)=""/213, 0xd5}], 0x8, &(0x7f0000003280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x5, 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xff, 0xe0, 0x5, 0x3, 0x0, 0x0, 0x200, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xcb7, 0x3}, 0x2554fa1b5ea12b40, 0xfff, 0x1, 0x2, 0x7, 0xfffffffe, 0x8, 0x0, 0x103, 0x0, 0x9b}, r1, 0xd, r2, 0x0) 18:53:26 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x432000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3f, 0x80, 0xfc, 0x0, 0x0, 0x20000000000, 0x8042, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x10000, 0xfffffffffffffffe, 0x7, 0x1, 0x3, 0x8, 0x3f, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xb, r1, 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:53:26 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xf0ff7f) 18:53:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xf5e9, &(0x7f0000000000)) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) [ 1936.476690] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1936.477524] CPU: 0 UID: 0 PID: 12059 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1936.477544] Tainted: [W]=WARN [ 1936.477549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.477556] Call Trace: [ 1936.477561] [ 1936.477567] dump_stack_lvl+0xfa/0x120 [ 1936.477595] dump_header+0x107/0x950 [ 1936.477618] oom_kill_process+0x278/0xa00 [ 1936.477638] out_of_memory+0x34b/0x1690 [ 1936.477661] ? __pfx_out_of_memory+0x10/0x10 [ 1936.477685] mem_cgroup_out_of_memory+0x164/0x190 [ 1936.477705] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1936.477729] ? mark_held_locks+0x49/0x80 [ 1936.477747] try_charge_memcg+0x81f/0xf30 [ 1936.477770] ? __pfx_try_charge_memcg+0x10/0x10 [ 1936.477793] charge_memcg+0x7b/0x290 [ 1936.477809] __mem_cgroup_charge+0x28/0x90 [ 1936.477826] __handle_mm_fault+0x14b5/0x3310 [ 1936.477847] ? __pfx_perf_trace_lock+0x10/0x10 [ 1936.477862] ? __pfx___handle_mm_fault+0x10/0x10 [ 1936.477879] ? __pte_offset_map_lock+0x190/0x330 [ 1936.477901] ? no_page_table+0xc7/0x220 [ 1936.477918] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1936.477941] handle_mm_fault+0x2c3/0x9b0 [ 1936.477962] __get_user_pages+0x58a/0x2f10 [ 1936.477992] ? __pfx___get_user_pages+0x10/0x10 [ 1936.478013] ? lock_is_held_type+0x9e/0x120 [ 1936.478031] populate_vma_page_range+0x282/0x410 [ 1936.478051] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1936.478074] ? __pfx_find_vma_intersection+0x10/0x10 [ 1936.478091] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1936.478107] __mm_populate+0x100/0x3a0 [ 1936.478127] ? __pfx___mm_populate+0x10/0x10 [ 1936.478148] ? up_write+0x195/0x520 [ 1936.478162] ? lock_is_held_type+0x9e/0x120 [ 1936.478178] __do_sys_mlockall+0x50f/0x5c0 [ 1936.478192] do_syscall_64+0xbf/0x360 [ 1936.478210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.478224] RIP: 0033:0x7fcae51b4b19 [ 1936.478235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.478247] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1936.478260] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1936.478269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1936.478276] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1936.478284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1936.478292] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1936.478311] [ 1936.496981] memory: usage 307200kB, limit 307200kB, failcnt 286 [ 1936.497466] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1936.497943] Memory cgroup stats for /syz5: [ 1936.535742] anon 35647488 [ 1936.536382] file 277651456 [ 1936.536606] kernel 1273856 [ 1936.536834] kernel_stack 65536 [ 1936.537169] pagetables 253952 [ 1936.537418] sec_pagetables 0 [ 1936.537660] percpu 64 [ 1936.537852] sock 0 [ 1936.538028] vmalloc 0 [ 1936.538247] shmem 269262848 [ 1936.538486] file_mapped 8388608 [ 1936.538741] file_dirty 0 [ 1936.538953] file_writeback 0 [ 1936.539213] swapcached 0 [ 1936.539427] inactive_anon 269303808 [ 1936.539709] active_anon 4096 [ 1936.539949] inactive_file 0 [ 1936.540214] active_file 0 [ 1936.540434] unevictable 43991040 [ 1936.540694] slab_reclaimable 823840 [ 1936.540981] slab_unreclaimable 154712 [ 1936.541314] slab 978552 [ 1936.541524] workingset_refault_anon 0 [ 1936.541816] workingset_refault_file 0 [ 1936.542131] workingset_activate_anon 0 [ 1936.542434] workingset_activate_file 0 [ 1936.542734] workingset_restore_anon 0 [ 1936.543025] workingset_restore_file 0 [ 1936.543350] workingset_nodereclaim 0 [ 1936.543643] pgdemote_kswapd 0 [ 1936.543887] pgdemote_direct 0 [ 1936.544168] pgdemote_khugepaged 0 [ 1936.544442] pgdemote_proactive 0 [ 1936.544706] pgscan 579 [ 1936.544905] pgsteal 9 [ 1936.545151] pswpin 0 [ 1936.545345] pswpout 0 [ 1936.545542] pgscan_kswapd 0 [ 1936.545773] pgscan_direct 579 [ 1936.546019] pgscan_khugepaged 0 [ 1936.546302] pgscan_proactive 0 [ 1936.546557] pgsteal_kswapd 0 [ 1936.546798] pgsteal_direct 9 [ 1936.547037] pgsteal_khugepaged 0 [ 1936.547330] pgsteal_proactive 0 [ 1936.547588] pgfault 385799 [ 1936.547815] pgmajfault 0 [ 1936.548040] pgrefill 9691 [ 1936.548283] pgactivate 34658 [ 1936.548525] pgdeactivate 576 [ 1936.548763] pglazyfree 0 [ 1936.548976] pglazyfreed 0 [ 1936.549217] swpin_zero 0 [ 1936.549432] swpout_zero 0 [ 1936.549648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12054,uid=0 [ 1936.550799] Memory cgroup out of memory: Killed process 12054 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:53:36 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) write(r0, &(0x7f00000003c0)="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", 0x1000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 18:53:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x8, 0x88, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:36 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000004640)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) 18:53:36 executing program 6: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}}) 18:53:36 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0xfbfb}, @void, @eth={@random="452bb6917e2f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @remote, @remote}}}}}, 0x2e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x38, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x58b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x7, [@multicast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @remote]}) 18:53:36 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xfeff3f) 18:53:36 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfffc, @none, 0x8}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:53:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x0, 0x1) 18:53:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(&(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x40, 0x7, 0x21, 0x0, 0x8000, 0x408, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x62, 0x2, @perf_config_ext={0x7, 0x200}, 0x101, 0x4, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xe, r0, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7, 0x40, 0x7, 0xef, 0x0, 0x1000, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040)}, 0xa911, 0x2, 0x9, 0x1, 0x1, 0x3, 0x3, 0x0, 0x80000001, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'batadv0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000003c0)="105b7972a5dedf71463fc0a3cb9c7522c7e8b3f6fcab6653844232f3d9fef1cbf20a2f8f2de7ffd9570c4e20b017ca91280130369ac35c3c0baaf23e4343bd457dc0f424fb191cba0e19f6bef5c80bcdc107714fbde8d15af7a57301864c79fcf7a65e6bd499545c9e4f290df6a352d52544fb456a5ba5bee6661329df9bc4895588df29198332c392f8f5a625eae21bb63a76b3c662196310c0e6b2fff2537c24c9112e05770b08a05a7e6c48115cff4d8301b6e1a3c3ea6f81f9a85891868c837ad1cbd159cf65c790ca7298f8a39c9a97031594203bba3792c4c311962bb6734c640ba493b8ebf13ad735604ca6a477ff30246815f87f3614e4bb01033daa76f27f0a69a52854634742a37f73adedeb900370ee80b0063f048c4a1cefc3268ebf3f418facae16ba5bb20658df607022c1460cc5991124c645b261bb2114b92c17014891df78aae70b68a47fd0620b64b3956d94dc51bf4ba0b7be0fff7c44e923b51988b0d19e88870f47b2df5e1f567c565f02d63c1d2341b20b78858df5d0e1e782bda976d6b67927b07bcf736f899478f712395cebaddf92feff2b34d592f0e4e60c7d5709c1fe9e5e9d4cf7890ea566a9615ab9407ad7d744a84c77b23fce580410ee82ed3a1d2321a4dfd3a0ac563f979cbb833de437672cd0124035675c8ad77d8e5da4844672da5d0dae2e8ea7bdc94ed26afda599cdc51e993a00e86071e4ec196d866fa5c07d7c99cce21319e67a6366f30eb9a79f97419b2dc2310290a0fa429deffcbc0239ac85984f938e4b12ccf3c4b32746f340f1871ed82908c0f9891b1c6100a70f4d6cef7eea12999863031b185d0a0f677667c49b7266dd263a4c744d98ff0c43825b8522442d9c1ab1c4ee0456e0bb7be846a4ab512a860c844601af9329716163224217b6f70018814519e68181a8b86bf33914f1307eb874102ef46b04a49e87c70bf9f6dc033fa2cfddd84eae350024ab1648ee2f6c103b43b5b6588fa4e4cee7fb229cf73a14c25fb5ac68544e4703bc696929288c80591bcf7f1635dade8c17b22ef670dd10503a96f26e656bf971ccb189d3f79fd5c34159da0b58240615d77b998784ea165287af03dd07684d180e03254f5de5e5b7d433ccba9e8419378fe438c75a341825c136fdd582c18014d0d73b0b9bf89af0a585deb5eefe7c548c982b96d7592c290e819b5375e5631151aa99f4dc92a301082c6f7ca44cb2e7e915b287036a4e14bbfc7a8d9c8b5760721eabb1036ddea95e7305bfb193c1d3c8a614ce127193d21e582676d8dcd31c8536fb43cdf849a960bdc3cd8cea4d383b554579a5c5eb4d5162ee3f0bbc62ae87434fe219921cc752a17b61d6bd7db2030a369f6b86cb13117fd2d99942af5d5374f0f37edebdd16bd58c63e27bfec3d230d9f2bea184929278ba2cf6c7d8ddb84b88c0e754c31ccd91a0b46d03ca96bdc33a98785e49361dfa9a55e23068af624f2dd956dcef26400a9c3efb2b89f2f8e2a3d2a59d7d82735770b0f205b1ea4acf1aa024e40c96b31fdb811cf49bde227e05cab359c1e8c31083844fbbc49aeec79914f7483d19427c080af83662dfaa1d8dad0ec20d0768fc3b292343e3f48316d7e38a940b495758ec76499fc403e50b6e3f3f4f7fab9c23272c05a4d3b35ae77f3dd6d36b1ced3bb9261de82a400c03210edc655c4dc4791acdddf460b5fcd7c8ac56cbff37c19efaed4c4e3fbe34a9877c7f3343e1b657f75c1c51a6c356af5b6026770b1215c112fc4bfba5d19f6a2ae7f4965f02ea52570d0c9be7f1fce7210971771695c187e3bfd1954f9fe8b14164c426f693faa5e04fe96d2876ad06b2690489998cecd4532af9c7fe4faa85ec24136a9e4edced73f18c422e465b610bcc5e26f69951f26da68ad092c89c79c68a7d3434472da58d40ed1565688fab51fd69881c02429d1bdba855d19b16884e1dfe0e9bc5c9455a1073454f70e3cf6cea92f37ae13a34b6daae3d7b72d8bbde3217a2b9cc7f542e6e37cab495db21170937d93f24307bd9152b81f9604b867e569603fc799e898e2f0c80f97beaa5f8fda18067647a34f5bf198fdc4acaaf5ecb16a5e0ba343c2c9679a3aeb2dddf5a8be95ddca255bb16a8efde246e6a6a7d6dd1b94a296b3b37ebd91e182a089baef8e03e40c0c0ae1fe3f759d322474160c7cf5cc567f7b0c7ee7c3343d6e338935af7e0ed49347506b60c661f2b80e3a51defd09cab0cbfaeed6ca92452c49b796a02d13c0a246850556c8a0501763554ca6ee3b889110c1f646d63ae4a142439addf415102d9cd5afb44b7ac232bc944c95cb3bf3afdddf3fe0c110433ea4461a5faed34dccf6684553bfd37475386a112871075ed39abe5a9df5f27c642f35b031624386deb5ad54a63d3a8d613e1ebca63f9c20235b3ff28d0ef1ce828e49a759fd41c3ff6a69487656e60a399775306c0ae87cf61b65e1803fd845f60a292e86021ee371321b275363ea794bd4b1f9ada680879c57ce71c4dc3917f56e9a753413cd63764246255d4035f242e29aa8a5d3c8c0539db7bfcd8570fd0f910edb793ce948605f19e133dbbf277806bb4128e3ac2a3a02bd22308b32a76dadb44cc95fae3b26c1ebcf9e8127bc3bdef836e0162d3275c7b765cf0537c02e9983fc54184787a10f4ccf0f9bd0397fc5689fdd3d5d44ba8b91c43686c2d5929dd334953f540ab0e5107ecc50b61afb9d6697510983c11ca435710986a4393a95e5300387ea9c7e0a6516f7a7228c33f087ed9374b6b6513799bc25fc93b388264de555280fc05a0508fa87ea18b3370770298833b9ae58550b607ccb4df44730662e6fa3a90c20418900d557f6f5c1b3fd4aa8b19ee6e8b4190ea40ead383b5d45557741a8d39f49e91139d4624dd05d4403e563db674c0f2546fd6cd7f49ca26274b0bc5a107392e9a958cb4a1da7f58dc045d7389c9c2318817b7eb6ecf57dbf69e706add175fb7d3c2022c2295e058491585df244eeea30a9518003d835f6ce763ac412394d57c5f6db6c476c44449600e2206eb6f2ad7e348243c94e6cf8fb180dec11f08c1af7029aa8898ad3dcffb2219f0a14c6abc3e7495ea5d254b33416c464ca3617a1b99c49b9e6cbac9fe29c1e3f107bbd3ff0bbfd328bc3ce878b65d1a884e44336d74df7a0bed6701c62e3a0811bafae2944f9bba83d57677d11cfc86b8186a4b09a5f20404fc32cb1518e9f66f28c96de9c1706c7c45b1507742ebcec486d9c9618bf3bee9c1e664a09eb850371cc2edf4c76203ba2e4cc2a04adf12737dad1a547ab9dd377119c11d2de7fa939402bd98479e931014027d11403c264bab9cea75a7be565f802b1a7776d00679e4a29347d3208594ac787f88ab8a525b17887251f9de9977256bad09f745a038465d6f517938c5c69470d43201f3ddb78df161c8eb200416b4145184a23fbba065bf3393d378ddd4ff7389819b901dfca20d6a27b6278710ae1b14cea142ce1a7300ddf077891817a0555309c46a455c6b18b0a0f0047cd6c0b89272768a33efd4f6fe50b0dd4ba7651745350f813048bdc84bea8114a61b338f4ce0472c95c2c9e2ada31a3e5c4898a6911e155167a0360870be593be2944084bace507a37392999536424ebbdfa21434b42f5f1384d3cbd137c9d45038eed9fc3c539ce1bac5802fdd05c466dbd7be51f230327228b55991a4da59c1d026d2f4252bccc5614ba36de7a60e8a929e235006fceeaea94b2d941245a7167a971b14cbfc601c809d0d77bc7c0cfab19c1ef92d554020a413f808b0ae606ed67a114c8b0365e6667805022e9e0a20c72e60cf0472212aa98b7c4770755d5a5ff6ae0cbd296216f414a91b175bccf28c4940d87fc324e83f2ae497c3d5d2e4e8edbe49eb418e67131cc96f093e9144110bc904844f2544c52f895a66e7a5b65e355a2e741582971d1952885895e17ff04417ec28d4c8d79392444fd4667b5dcc90362a4bae0f9436f5b0a087b7d2c649fd129fd712c6b03857e5d07c7439ef6aa61230a7a7dfe03f3471e52621857c9d9046471dfc1bf863316a40ba3c2614b6af046fa370dfa974a54c282dbbd121963b4bea6853d8a90dcee8398696e1ed16a1047d69f281f2107579fcd09875d2b95f63452979fd97445b6ea2cf5809e071d32830cbfbd4f959f43fd18d3a97a16016a1e2609ec5da912046ac6caa836028c9e00836618298c8e3b4a0b4a27db695177e968765de97d86cabde2aa5356474d2f42167e41d287c94f1e9af67523f4e2ffaf17a0a7f69dff222d5fdbb3ee2bf6250e15eb83aef5b1122b2879e757306556df2382d1752614df004f3bb1e527ad20564d64cf1ba8ed39013475d07fcc7c1e576b68252656af880babf880f9032558649b74fb5f5bd77c7caeb7a48f465bc1a75819fbae47c0bb9209d377be73fc685145b80c57825016c44825e11faae41082651089759acd53c581db179fa759e86f8df70074c4ba7641e7bc552b18f2ae5b8acc90616c5dc56a1c6b4e8aeb1935b9f98b65ba86cd47b3bb893cee5c820251a70fe6dfdaea385e4abe6fc67c8430ac70e2d542726449e2e526b2515fe4c29e70525103be3e687d6f66bc8e84db03c4a82f7825f24d5e4584a37aff6f083cc2176b814b14c749db2881fc628a95f7c7604efe0e5d1d4f45173f7ebf611102155637fe2d47ac7689327e4f8d579a4521b1baa441b771a590750c0bd9aabcbaa75280b2530d5636b63e91a31e0ea861bd0b844e97572245799f940dc10ac0b5a0a88ec947b1536d22eb28130a729cfea8e8b0436d80dce8411c67ea77c3b57b2ade91468690a694140aafdabde8ae47b43d4509cce5f6d85b41ff087b3e7882e6e0b96303fa42177d092b5a4bd57a15b8d507ca9354b47c17cd34c31863f07ea699bb4bebee9d7253577dea88584cc9fc89b4097d2a2fadba3a07d0892a3143d631ad6d661f61e7e14c534583bc702b983d9871720a15de3686f6c3e7247b0f555b4708ed6aa8378b3b0541811ca18b4881d4ba16ea58c462aed1fb1364f4b41dd14daba8206188150fc076804bff12867c6f618abc83f781d35a59b8dfce83ad980fa322c8812f883ac8625226daffd1269352391d5c75d0acb4b498010d58785db37aec967950a455528338b72fcecb8c2c3cbef9c37f959cd380436fc97b212bba2669825fdc387dcd4d1224e30bc88eaeacee73c9a8c88ada2fa73a0705b31c626b607b6e028453c1f80ba097dd1d5adc19bedb76bfc535aebaa1a797226ed2d1b61254104785ea45f33714cb41c35ea612cd3c0561ba78399d956d68cf2e0d122aa44b7df42f9651a777e212a1d0ce3122312096a3ce9da17f5d766accb565cefaded0d080faa1d581af01593409e1c0028ebab15cf21477f39e031ff3325868b4950123b60e201e98789894a024ffa7901e0c69446e3cc212d5650d9e83d8cd721fc9240067e88fe9de93e2932cdc1034966f27c7b42bb4c7d15a629c163ca7df670066379d51a8173f2ef8d5b9c65bc1d70ae6be67e4d311e44aba4425038a5a846a6f4cb213eb60d7ddb4eb2ddccffcdeda28ef514488a6f7cedf8b5d494102ba45a97fe65a2ef93e509cc411376bfac282c1e7a119608202cb563886ac2324ca114899aaee48b92d3da63f0a1f153f36ee3d5164edd4bcb6ec8ff62055a52ca274d1196b6a53f68643b41d0c7417de0f9a24d8352e9ecce6f065f8828931351d733714acfaf8ed54d88c23a1bd30624e934de74e2f65ede49f80ffcec42cacf1", 0x1000}, {&(0x7f0000000140)="b370ffff", 0x4}, {&(0x7f0000000180)="1c7ce762e6dfc4afddf016f0a7c2a9db6bd2d26c0db07ff34a91c18146ce4691a6dc1c4a3f7c35a75a875dab770d59a338ef74e5fd9e3ea7b202b96d35e473e6ab1eebf7becabfc4c9e66f4cbc7b33e215a7067204e13992fbce275a545de35d40c1946414160762f1200c6da43fa66162833c7ff2c46009b12a19a6dacdd2ceb0b1f19b7a1f17ba7a2c9b0fc6fa4ca91422c4b158903cd2653cf39c993a329a21c4b2e8e11d8e90de357d6e8c29f7b8c76ac5457fc296ca75ce323be7e09af75885cf0293a06c1c9aa34699", 0xcc}, {&(0x7f0000000280)="48673a6edf775a7d9da82cf627aa6d7dcd83535ea2ef119333fd4a5bb59a95ecfafaf6737442b65edad2d293229c01b0e1435e74d7f9e9f68de77dec0e946cb5bafb298e1107325cb9de7442be678ad54bab3904f59e2d4623c2e83241debc3912470baa1629104cb5a2fc5cde5b79668ead19b07674b8509b9ac77aad0b390366190486a08dbfed75d3e90407", 0x8d}], 0x4, &(0x7f0000001440)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010102}, r1}}}], 0x90}}, {{&(0x7f0000001500)={0xa, 0x4e22, 0x5, @remote, 0x1b1b}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001540)="77bf244f0c6c4c8ddb42f221de466adee2e6a33ac12459ea861cba57d933b6bf2555a1c7d1bcd949ec03f4d13fd84ccd525a9ea669a2f91b653ec18d792a75c4b6532f76826d015a2cddec9314e3d73b2b04190cb3aa30f4af3fc0a74fd98891a7019903a1796eba10f951d1e394d821d2c66f406d21a25735ee0d130fa457efcecd356b3a1212655bd0bce12095b7495db4043c0c64bc5d3403d1614ac3fbf9665c72465c68a0e5554f0bc77af9f6061fe201676d7f526fcb66e9daacca6f2f7ba6d9825b461003960fc2b9d708764a115efc64ce82b985968f26852702a5db5b290225910f54089e2a764a15c5eb1cdb8cd1e5", 0xf4}, {&(0x7f0000001640)="3f4f35c718912e82d808c8684d8267c3f572c962a56462644235385389642374af7efc4f5fc51dedcb406522232c8584629bb1366031a6058470d6463d41f0d394c3189e04983a24f5e2751e50fef9dfcc81a1325e27b35c10e57a051858a0fc9138625b5b1f3eda900396ca5f8b7541fb6a7e71fb8e30737fe92dd19c9741e68a54b43febcc152220880d354fb7c79e3fff61e534bd7c222573212bd75a4ba64563a52b727bb581b1445327787ec3c2972f0697f3fd4c74dc3dc4d14940455e2ecc", 0xc2}, {&(0x7f0000001740)}], 0x3, &(0x7f00000017c0)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x62, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x6f}, @ra={0x5, 0x2, 0x4}, @generic={0x7, 0x8, "138ddecf6f2792ec"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0xc0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0xd8}}, {{&(0x7f00000018c0)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000001900)="23ec8fed51538e2d4557bdf3a4d96070da06cbb237de0ba8d3cf0ac91285a52dd7d42a8439a1891cbc76a7d18b83e460c71724d54a2e44f098d48bf4a258708bd28d49867fc318e3757b27b39ef2b0e2047ec1ef5e5e3340d878a398ae455ba5d2224f38405553f0adb65d5fdb23afb872d6f0ade7cc86", 0x77}, {&(0x7f0000001980)="d6c872c3ae006e271ea420ae340881767188de3310f611f95b52b74c99266d871020e5e132eee803836162994fdd9f3d965915774a3b0372f8f436c9dc9ad090fbbb36e13a2eb53fae2d1e1d4c54e834374780f1c446539efb13e6994c15bafdb9a07245ee964951b96431a44c69de441fb395dcc6c7f50c9fddd44751d99b515ca58aa28e970fd697c3a5dcc483b1ff3a4347b202fbc658b3a87f7fd566360ec00b750b9c56e3a36870179a424ede0b22932d35f954acd3238a4a568f555d2199cafe100847fc784d8406f033c8616f1bc835932c044fea2b4d1eb9e70d", 0xde}, {&(0x7f0000001a80)="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", 0x1000}], 0x3}}, {{&(0x7f0000002ac0)={0xa, 0x4e24, 0xffffffff, @loopback, 0x400}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002b00)="88dc2817d2b82ceddf14e02d8c24293f828d8fbee8b96d5d96f267d9a93d111cdc0a2708e5b228246c8420da9f50a3a65255f84bba07b993fbd0d1646fd99cd09a78a535b9403b61b4d72809", 0x4c}, {&(0x7f0000002b80)="3010642c86130269fbea9c28ad558354671b1209ee0633cd22cce311e2019aa94933acfc29b366d8bd687986d24f831a52bdd53465929fa72cac5a3cea8ccc54144d33e48769099b944f3da4516f58c2d3e0787e99a3599f127a9ccaf45407ecf9cb1055c6683bf480c1871c249050563fb8dbc603638c6a733ec4f98aca211d3a02ca204bc43c51f29bf4d5d219cdc9fc8ff77aceb63e091c023e458ceab0780769735ed2cc460b1bdd620f9e0ff5575a825e76a30870ee8310d0afd0c3", 0xbe}, {&(0x7f0000002c40)="d7a3ed6dcff06d5d3bbe1eaa76266006a5d65a3735a95ca71330da582b9b888e424554933a04e19cc8fd5236a94784a76fa34a41dbb53e74f109a7e33f9714", 0x3f}, {&(0x7f0000002c80)="8176ccca82f4f3edebde4c2312e019c4cafb450878164b6847abbae937a1a959e5a46c00a991edb359e4b64ef2f4c250506f8365f166b1781e30beca14ee2e853872cd1cc524f7a7c59518a0c6cfd76fb04aa568f1d1f81e149d69ca02beac5bde0576d1aa1c38882869c2f1b44a76b581b71e2a9e60efab1ff8191ed8f300e3b8e321b567bdfc7902009c18b904b2498a01bb537518f03f7a216d7935be6bed36bb9b3fa3f57a3bd42601b79c034db2d80201780cc727c21d5f", 0xba}, {&(0x7f0000002d40)="289f2797b3144dc78b87539b71f9c5", 0xf}], 0x5, &(0x7f0000002e00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x2, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdr={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x2, 0x1, 0x0, [@mcast1, @remote, @private2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x97b}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x35}, @jumbo={0xc2, 0x4, 0x20d}]}}}], 0x178}}, {{&(0x7f0000002f80)={0xa, 0x4e20, 0x8, @mcast2, 0xfff}, 0x1c, &(0x7f0000003040)=[{&(0x7f0000002fc0)="2a036b3ae7f673df341df7e807d9767d6e7b337095c834484b82c9e1141739638fccf02c063897d0f30a56e7c4569591ea792f4c1537ea86d9153b521e91452f292deeb06814a378413df6f8ce4e44e6aeaf9293c704662afb3f7fc0064f80de659216005e155fc7e8c195", 0x6b}], 0x1, &(0x7f0000003080)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}, @dstopts_2292={{0x140, 0x29, 0x4, {0x0, 0x24, '\x00', [@generic={0x2, 0x4f, "be41724c14770c1681acdb43a1945cddfc7222fd8cf987b0ef44422a0b07606df155b879e6bd3398fc27d382036b85c533b45c9a795e32148081a3e1124369502735863b0b33af69c22b6a69d7b66d"}, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x1ff, [0x8, 0x4, 0x101, 0xffffffff, 0x8, 0x8, 0x0, 0x80]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0x4, [0xfffffffffffffffd, 0xffff, 0x5, 0xfff, 0x9, 0x80000001]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0x7, [0x9, 0x101, 0x2709]}}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x28, {0x0, 0x8, 0x6, 0x800, [0xff, 0x7, 0x0, 0x6]}}, @enc_lim={0x4, 0x1, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd045}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x1b0}}], 0x5, 0xc000) 18:53:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r7, 0x3, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000480)="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", 0x200}, 0x0, 0x0]) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0x6611, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e24, 0xd97, @empty, 0x1}, {0xa, 0x4e24, 0x0, @mcast2, 0xfffffff9}, 0x18, [0x6e, 0x7, 0x2, 0x8, 0x6, 0x9, 0x80, 0x1]}, 0x5c) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0x6611, 0x0) io_submit(r7, 0x2, &(0x7f0000000400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x8, r4, &(0x7f0000000100)="07dd8b2f9b48c138ce8b93d2d7d906d6f7fec29cf663edcbd771a45d36bdb5a268c84853494250d8b3475a4706233698ecd93eb92d921e9522cde1f1fbf8e9d9e8b7db73a47db34dbd8f34bdc207dea7d085556caedfcf99e5a9344be8d3dd5838467d55decfb483b23ae08e9b877ff26369ca8295da02ecd93eba0e651dd4d187136ff288c893d6f60b58f917945cd0346919d2e21b6bb6ae1f2d5e01efe0abd9870406abf875b7ad23d96f4830777d6c90b26ec7b85b21779adba479c8e5321fb9891c606a14a8a64667c28b840674030999182a562a5c7e", 0xd9, 0x7bb, 0x0, 0x2, r8}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xa6f1, r1, &(0x7f0000000280)="d3e835ed2539c5c5a15823a4d78171aef9f5f0b9830e8404c45fa352009e2b6954e966f105be0accd1c51e42b8fffd3f797502da3bb7e2739d2ed16506bf73518c1773fa6b02b9aaad9a8c1ffdff47189678093d140061283c7a32fe11a0f96f899681c74a84aa33658e6c7085847bcaf20d0a58c4a0e91eb9e1aa0e4e65b41d83497f81e9756a391b21f5953a8c48341385c69978337069501f07224dcd09c3b1467bafbc4e7b7bfed0ba6c45bbee4242f4d58ad4dd0e7fcd5d5eae23122a33cf8afa17323b5f586031e2304ae6f281678bfe4954bcab664826549d0d8996613f27861832bc7a2ab57c009267f7", 0xee, 0x2, 0x0, 0x3, r9}]) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000000c0)={r5, 0x1, 0x6, @local}, 0x10) recvmmsg$unix(r1, &(0x7f0000001280)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001240)}}], 0x1, 0x40000000, 0x0) 18:53:36 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x1000000) 18:53:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x40, 0x7, 0x30, 0x9b, 0x0, 0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb, 0x0, @perf_bp, 0x8, 0xc0, 0xfff, 0x3, 0x6, 0x3, 0x10, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:36 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7400) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r0) [ 1946.230380] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1946.231907] CPU: 1 UID: 0 PID: 12111 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1946.231948] Tainted: [W]=WARN [ 1946.231956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1946.231971] Call Trace: [ 1946.231980] [ 1946.231990] dump_stack_lvl+0xfa/0x120 [ 1946.232030] dump_header+0x107/0x950 [ 1946.232079] oom_kill_process+0x278/0xa00 [ 1946.232129] out_of_memory+0x34b/0x1690 [ 1946.232174] ? __pfx_out_of_memory+0x10/0x10 [ 1946.232221] mem_cgroup_out_of_memory+0x164/0x190 [ 1946.232260] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1946.232308] ? mark_held_locks+0x49/0x80 [ 1946.232343] try_charge_memcg+0x81f/0xf30 [ 1946.232386] ? __pfx_try_charge_memcg+0x10/0x10 [ 1946.232431] charge_memcg+0x7b/0x290 [ 1946.232463] __mem_cgroup_charge+0x28/0x90 [ 1946.232498] __handle_mm_fault+0x14b5/0x3310 [ 1946.232538] ? __pfx_perf_trace_lock+0x10/0x10 [ 1946.232569] ? __pfx___handle_mm_fault+0x10/0x10 [ 1946.232604] ? __pte_offset_map_lock+0x190/0x330 [ 1946.232648] ? no_page_table+0xc7/0x220 [ 1946.232680] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1946.232726] handle_mm_fault+0x2c3/0x9b0 [ 1946.232768] __get_user_pages+0x58a/0x2f10 [ 1946.232829] ? __pfx___get_user_pages+0x10/0x10 [ 1946.232870] ? lock_is_held_type+0x9e/0x120 [ 1946.232905] populate_vma_page_range+0x282/0x410 [ 1946.232945] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1946.232981] ? __pfx_find_vma_intersection+0x10/0x10 [ 1946.233013] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1946.233045] __mm_populate+0x100/0x3a0 [ 1946.233084] ? __pfx___mm_populate+0x10/0x10 [ 1946.233125] ? up_write+0x195/0x520 [ 1946.233152] ? lock_is_held_type+0x9e/0x120 [ 1946.233185] __do_sys_mlockall+0x50f/0x5c0 [ 1946.233212] do_syscall_64+0xbf/0x360 [ 1946.233248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.233273] RIP: 0033:0x7fcae51b4b19 [ 1946.233292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1946.233316] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1946.233340] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1946.233357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1946.233372] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1946.233387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1946.233402] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1946.233440] [ 1946.273879] memory: usage 307200kB, limit 307200kB, failcnt 313 [ 1946.276423] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1946.277397] Memory cgroup stats for /syz5: [ 1946.293346] anon 35647488 [ 1946.294742] file 277651456 [ 1946.295256] kernel 1273856 [ 1946.295715] kernel_stack 65536 [ 1946.296286] pagetables 253952 [ 1946.296777] sec_pagetables 0 [ 1946.297320] percpu 64 [ 1946.297716] sock 0 [ 1946.298104] vmalloc 0 [ 1946.298556] shmem 269262848 [ 1946.299014] file_mapped 8388608 [ 1946.299571] file_dirty 0 [ 1946.300106] file_writeback 0 [ 1946.300607] swapcached 0 [ 1946.301048] inactive_anon 269303808 [ 1946.301770] active_anon 4096 [ 1946.302303] inactive_file 0 [ 1946.302772] active_file 0 [ 1946.303247] unevictable 43991040 [ 1946.303772] slab_reclaimable 823840 [ 1946.304378] slab_unreclaimable 154712 [ 1946.305066] slab 978552 [ 1946.305527] workingset_refault_anon 0 [ 1946.306172] workingset_refault_file 0 [ 1946.306867] workingset_activate_anon 0 [ 1946.307515] workingset_activate_file 0 [ 1946.308163] workingset_restore_anon 0 [ 1946.308850] workingset_restore_file 0 [ 1946.309488] workingset_nodereclaim 0 [ 1946.310218] pgdemote_kswapd 0 [ 1946.310715] pgdemote_direct 0 [ 1946.311241] pgdemote_khugepaged 0 [ 1946.311779] pgdemote_proactive 0 [ 1946.312352] pgscan 579 [ 1946.312757] pgsteal 9 [ 1946.313177] pswpin 0 [ 1946.313548] pswpout 0 [ 1946.313931] pgscan_kswapd 0 [ 1946.314448] pgscan_direct 579 [ 1946.314949] pgscan_khugepaged 0 [ 1946.315497] pgscan_proactive 0 [ 1946.316117] pgsteal_kswapd 0 [ 1946.316610] pgsteal_direct 9 [ 1946.317130] pgsteal_khugepaged 0 [ 1946.317658] pgsteal_proactive 0 [ 1946.318207] pgfault 394852 [ 1946.318654] pgmajfault 0 [ 1946.319109] pgrefill 10575 [ 1946.319558] pgactivate 36115 [ 1946.320051] pgdeactivate 576 [ 1946.320588] pglazyfree 0 [ 1946.321026] pglazyfreed 0 [ 1946.321512] swpin_zero 0 [ 1946.321935] swpout_zero 0 [ 1946.322407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12106,uid=0 [ 1946.324647] Memory cgroup out of memory: Killed process 12106 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:53:46 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:46 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmdt(0x0) shmdt(0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:46 executing program 1: timer_create(0x5, &(0x7f0000000000)={0x0, 0x6, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f0000000140)) timer_settime(r0, 0x1, 0xffffffffffffffff, 0x0) 18:53:46 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80]}, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x1c0, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x39}}}}, [@NL80211_ATTR_TID_CONFIG={0x198, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x36}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x88}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x20}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:46 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3f, 0x7, 0x6, 0x0, 0x6, 0x80801, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x8, 0xffffffffffffff1a}, 0x10000, 0x8001, 0x5, 0x5, 0x5, 0x2, 0x6, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x414000, 0x125) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x10, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x1, 0x7ff}, 0x4041, 0x0, 0x3, 0x2, 0xc0d7, 0x2, 0x8, 0x0, 0x240000, 0x0, 0x8}, r4, 0x2, r5, 0xa) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x28e400, 0x5) poll(&(0x7f0000000040)=[{r0, 0x4090}, {r0, 0x8}, {r1, 0x400}, {r1, 0x320}, {r2, 0xa14e}, {r3, 0x40}, {r1, 0x9240}, {r6, 0x8000}], 0x8, 0x1) futimesat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) 18:53:46 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:46 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x2000000) 18:53:46 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xeb, 0xff, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x5910, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x2, 0x3, 0x40, 0x0, 0x0, 0xc4000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x2090, 0x6000000000000000, 0x4, 0x1, 0xc0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x9, r1, 0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:53:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa13e}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x150b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x4) 18:53:46 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x185000, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000000)=0xfffffffffffffef3) 18:53:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x4, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:53:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2, "8f9acc"}, 0x6) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000200)={0x0, "bd5b2a452d0dc719f33929c77afd7798"}) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.min\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@ocfs2={0xc, 0x1, {0x5, 0x7fff, 0x3}}, 0x100) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) lseek(r2, 0x1, 0x0) 18:53:46 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r6}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r8, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) sendmsg(r8, &(0x7f0000000280)={&(0x7f0000000180)=@isdn={0x22, 0x20, 0x1, 0x4, 0x8}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="6f04d5491d129109becfb0f82a4e470af24a50797f449cd6646f6ea0e7e6fa9cafb149f0f2d0393f361593137fd801a70a0fabedfdfb14f18972bf81d6dee1165e8b0cbe42e4a70bd6b9c123b5dd6612c8df0e7e2e4ee0bc3b85cd06e24f16776b4d0e269e18345d52866359541273336f340c19d0d426f1264e63f86b885b429ba46bb8a06615fb70284991191a22424e4368d9db0e078a0e19d2832ad5f3ad26d294d5496ca550b77e69df2d752b6146462149b810dc1124", 0xb9}], 0x1}, 0x22048800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="69705fd80b8100355be4bf2f35d6c076744507000000000000000800", @ANYRES32=r9, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', r11, 0x29, 0x1, 0xfd, 0xcb9, 0x2, @private0, @mcast1, 0x8586, 0x8000, 0x6, 0x400}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fedbdf25060000003800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200766d7468355f746f5f626f6e64000000080003366a3b51df5c42140240b930c408000100", @ANYRES32=r7, @ANYBLOB="08000300020000002c00018014000200776730000000000000000000000000001400020076657468305f766972745f77696669003400018008000100", @ANYRES32=r9, @ANYBLOB="4a9e5f140002006d61637365633000000000000000000014000300776c616e30000c00018008", @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="64000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="0cdf98f48bb464768ee669c94ca9e74a1861bf1257aa17d35f29df0229fbe19ab371b84ab70bd35d6b34bd11c8973e3b491e1318e9ace0b7cc631a296dbe37fca89b1f9225df64d31c982289e18f30fdf9e8c4cb57599da10960d7f5b473a3afaad566e2998d1de35dc3e587eec6aeebad6f64032b90674ca3ead500e98f1cecaa730d0eb691e37155788e810533646abb21761b694663081fbb9cd32b640fa5ca4f962074f931c3d199497361965eacfcb8e547633fde92749ee8221189587cd0b70150202353d8dadccb0d8d7965a3cdfec40bcee730f4", @ANYBLOB="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"/375, @ANYRES32=0x0, @ANYBLOB="18000180140002006873723000"/24], 0x184}, 0x1, 0x0, 0x0, 0x20041019}, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x4, 0xff, 0x5, 0x0, 0x7e, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp, 0x1040, 0x2, 0x0, 0x0, 0x2, 0x0, 0xac7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, r0, 0x8) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:53:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000180)="f70a98f943c1ae12e27c8939d61e67fed32afdc40c85a29d96bd491d9799f5d2e1e08422c6db7497ac1f35e03cf0c5d5c6b27ffa2c7826a8cd5f6489ee6bd74c05569d9d50a5e6d6c820f7e31d3154af74f585f29b693e2ef7766a78060a50277c08aede4dca7f3b39a28e5f78452dd3020b7893010964", 0x77, 0x2}, {&(0x7f00000003c0)="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", 0x1000, 0x1000}, {&(0x7f0000000200)="10fe2c0844933cb9dcf4e2f7d6a03e6e35fe11698faf580ca925c100448e79d53836903f1042ca864b11e9dab5fec48cb374b01f4d2a7478ea34e0af51f8cf398c1d4cdbb64430238683e93c2c3bb02e7a6cc94b12b2d61f470af322c1e40daff609aa4d4c29ba93573e1335f5136efb6c6d0efb285a145b6693a1fd4521e82e331db142efe87958db395c1ff2d05c4909296500c8225d65c8fb", 0x9a}, {&(0x7f00000013c0)="075d0af1776dd92df95218ff2512f214d359d7ca92cfc453beb972d5890e2b0235905035eb3789368c33a3b168bd8da1a91593ab78571eb4047bc015dcc7b3cd3041c313bb6477c05d5a59edb3e0823ba7fd607076ead2f0d81a9f5eb9270177da97e2b195cc34d4852b72898c12aa18490129380500ea7b1e72abeb91c0dac204bc7af1180d5327571a80a1159cc106e7a0f6f26b3b984ea484c6f940b8ae59cae675c7b9aa481910e1a505756fa0cbd945e9e123a2f5eb82371b2069c77204fa8590cf14de1d323b56e4265babe7ec7de67bd7", 0xd4, 0x9}, {&(0x7f00000002c0)="cca2d1510835639f5f57286193550032bb6cdf66c3ead7", 0x17, 0x8}], 0x100000, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x20, 0xe5, 0x81, 0x1, 0x0, 0x7d4f0424, 0x10402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp, 0x800, 0x8, 0x6, 0x3, 0x1000, 0x149, 0x11, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:46 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x5000000) [ 1956.328214] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1956.329171] CPU: 0 UID: 0 PID: 12167 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1956.329192] Tainted: [W]=WARN [ 1956.329196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1956.329205] Call Trace: [ 1956.329210] [ 1956.329215] dump_stack_lvl+0xfa/0x120 [ 1956.329241] dump_header+0x107/0x950 [ 1956.329265] oom_kill_process+0x278/0xa00 [ 1956.329285] out_of_memory+0x34b/0x1690 [ 1956.329308] ? __pfx_out_of_memory+0x10/0x10 [ 1956.329332] mem_cgroup_out_of_memory+0x164/0x190 [ 1956.329353] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1956.329377] ? mark_held_locks+0x49/0x80 [ 1956.329396] try_charge_memcg+0x81f/0xf30 [ 1956.329419] ? __pfx_try_charge_memcg+0x10/0x10 [ 1956.329441] charge_memcg+0x7b/0x290 [ 1956.329457] __mem_cgroup_charge+0x28/0x90 [ 1956.329475] __handle_mm_fault+0x14b5/0x3310 [ 1956.329497] ? __pfx_perf_trace_lock+0x10/0x10 [ 1956.329512] ? __pfx___handle_mm_fault+0x10/0x10 [ 1956.329529] ? __pte_offset_map_lock+0x190/0x330 [ 1956.329552] ? no_page_table+0xc7/0x220 [ 1956.329569] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1956.329593] handle_mm_fault+0x2c3/0x9b0 [ 1956.329614] __get_user_pages+0x58a/0x2f10 [ 1956.329645] ? __pfx___get_user_pages+0x10/0x10 [ 1956.329665] ? lock_is_held_type+0x9e/0x120 [ 1956.329684] populate_vma_page_range+0x282/0x410 [ 1956.329705] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1956.329723] ? __pfx_find_vma_intersection+0x10/0x10 [ 1956.329740] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1956.329757] __mm_populate+0x100/0x3a0 [ 1956.329777] ? __pfx___mm_populate+0x10/0x10 [ 1956.329798] ? up_write+0x195/0x520 [ 1956.329811] ? lock_is_held_type+0x9e/0x120 [ 1956.329828] __do_sys_mlockall+0x50f/0x5c0 [ 1956.329843] do_syscall_64+0xbf/0x360 [ 1956.329861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.329875] RIP: 0033:0x7fcae51b4b19 [ 1956.329886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1956.329899] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1956.329912] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1956.329921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1956.329929] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1956.329937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1956.329945] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1956.329964] [ 1956.329969] memory: usage 307200kB, limit 307200kB, failcnt 350 [ 1956.350908] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1956.351471] Memory cgroup stats for /syz5: [ 1956.352185] anon 35647488 [ 1956.352830] file 277651456 [ 1956.353116] kernel 1273856 [ 1956.353385] kernel_stack 65536 [ 1956.353677] pagetables 253952 [ 1956.353961] sec_pagetables 0 [ 1956.354267] percpu 64 [ 1956.354495] sock 0 [ 1956.354706] vmalloc 0 [ 1956.354934] shmem 269262848 [ 1956.355222] file_mapped 8388608 [ 1956.355523] file_dirty 0 [ 1956.355768] file_writeback 0 [ 1956.356050] swapcached 0 [ 1956.356327] inactive_anon 269303808 [ 1956.356658] active_anon 4096 [ 1956.356937] inactive_file 0 [ 1956.357229] active_file 0 [ 1956.357483] unevictable 43864064 [ 1956.357787] slab_reclaimable 823840 [ 1956.358135] slab_unreclaimable 154712 [ 1956.358477] slab 978552 [ 1956.358714] workingset_refault_anon 0 [ 1956.359052] workingset_refault_file 0 [ 1956.359433] workingset_activate_anon 0 [ 1956.359782] workingset_activate_file 0 [ 1956.360154] workingset_restore_anon 0 [ 1956.360502] workingset_restore_file 0 [ 1956.360842] workingset_nodereclaim 0 [ 1956.361194] pgdemote_kswapd 0 [ 1956.361480] pgdemote_direct 0 [ 1956.361762] pgdemote_khugepaged 0 [ 1956.362095] pgdemote_proactive 0 [ 1956.362404] pgscan 579 [ 1956.362636] pgsteal 9 [ 1956.362863] pswpin 0 [ 1956.363102] pswpout 0 [ 1956.363331] pgscan_kswapd 0 [ 1956.363596] pgscan_direct 579 [ 1956.363884] pgscan_khugepaged 0 [ 1956.364209] pgscan_proactive 0 [ 1956.364510] pgsteal_kswapd 0 [ 1956.364786] pgsteal_direct 9 [ 1956.365061] pgsteal_khugepaged 0 [ 1956.365395] pgsteal_proactive 0 [ 1956.365692] pgfault 403905 [ 1956.365953] pgmajfault 0 [ 1956.366220] pgrefill 11484 [ 1956.366479] pgactivate 37614 [ 1956.366758] pgdeactivate 576 [ 1956.367038] pglazyfree 0 [ 1956.367304] pglazyfreed 0 [ 1956.367561] swpin_zero 0 [ 1956.367806] swpout_zero 0 [ 1956.368060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12162,uid=0 [ 1956.370547] Memory cgroup out of memory: Killed process 12162 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:53:55 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) setfsgid(r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018004000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB]) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000500)=0x1) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000080)="9b50e744a145e74c74fcd63fe2e1d1b73f276f74a8f032db8f428252c40b63208d04887e5265037c8f97855c58f32b8c5ed18ef9f1ead66d9070dfcd90a16998362955ac9d12d3172c87bbe257e09176ed401f2fc2b9b3d1cca0c879677555ad791dfe1e8aadefad79f3ae6a301d04e7420f14254f3c63474071bcd66df75182b7af962531f3eeb583685acbe5f3be37e818fa71ab74c5", 0x97}, {&(0x7f0000000140)="559d2122fa09b8651075064f4f7f42c698d616ff2fc50d0c8161e15c379bd17c3927299a87294751e3bc7f8efad7f5f0cc71ae5a55a261eb0291c70f67ed5d39563b6ef751be62cd53bfadbefa3cb9e3a471e82d303fe3a0e1d31a93c90bfd8cee8a972b635d9694439fe6e06a4d5feca502c0e7a3e98a51f769d717044825a7090b266724a83be98cf065daf04e7f6c952e21e0be32ad9d67397124a30bfdde06e6f302d7b19dd2354736b2063deccebc2baa2e862c1e3d1622b7485f12beb6cc378f2bb7e20c2e633131de9f09f13273f5d9409b1fb29e31c618b0a69e1bcd86bd00c7653583e2", 0xe8}, {&(0x7f0000000240)="5d01094770f61a65efe536", 0xb}, {&(0x7f0000000280)="e5bae926ed2b6f0e5e2e96c396c20ce830e74146d6af3bb75b5ec2e32b5716895136c786752773a567886d91e34f7bd28b45e9265be1d62610c0b9a05fe24c63eb7156fbb148aaa251328865879a9eb7075a5ea5185f74ad97feb0dfec312e99ab32ca1558af3a788d4186c2c6d3c76854fa6aa6c6e8e7e928a1d8784ec12912264f51e86c415c1e03e20652ad7bc8889d", 0x91}, {&(0x7f00000003c0)="3fae30a2843a83c94287314c020df9447870b4dd71e089d6a9e8ccf623b397e459ec37657b5d9d05367df39370c2c1981efeb2be57e8b2c6217c0682b7679f94d40e95f6af1860e3f60a7ca20c2263ba2e4b748438013c6029243a1c832c1b2c3536a129dfb02b53c40612dc6c46e2cb927a273d86bbce871c5ff3fc2ff88d005375e751653fc00cb0d6e13cabea9b12137777b41fd0b46f5d49553514ff2674ff69d5ddd6848d54d4f363a122c7a93166cd9ead9407123b580f787294df600c7f1aa2768844f1c04ea09510637c1f", 0xcf}, {&(0x7f00000004c0)="b5", 0x1}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000000500)}, {&(0x7f0000000540)="0a06209c01ae4e0ebdf299afbedc037a0e2e17ec5495fe9c8e2d3d70e3a7988ccff50ce89f68f6def8598c383b98aa18951f9b3d6056d7456edb4819392c4e016f1864be616f61ff0ad5e3698284d4c96c370b8c6c724221badd66282b352565f0b6f8c52c49353ffbd0b986266529be01740500f889aea12ff5832ed4e5f7ce64c9e31836cd73b7f2191667", 0x8c}], 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000870000/0x2000)=nil, 0x2000, 0x13) 18:53:55 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000d0180030000020002080000001e01f16ece1ed8f4550c2875f331aa4f74408d0000a6e834b50f474f08daeb1ff964b113cf65f0be4ab1e56833508a26e8721a91a226e382d146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f"], 0x61) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0xffffffff, 0x3f, 0xab6}) write$binfmt_aout(r1, &(0x7f0000000200)={{0x108, 0x0, 0x2, 0x30b, 0x1fe, 0x6803, 0x76, 0x4}, "12d8278d4a3bda3fcc95c933522e5317db184affd7e9f5bbe38f3ccc475da81b43e8683fd4d9fff400deb4a671dca0ff2926ac3a61e65b23e6663a6aae06ef044f14595df2cac4dfc7100b68c795e3c40ce09f0fd6e543f00457c15c4d0ddbceeeac21c02447e46df459497d41e57dc4ddf781bc77f2202506ee9ba0cc4e2264409e74b852082f0a3c428c424855cddbf8f9a684ca2e1088fea1cec8837b5fa729c752641cd461ab88c0014107713429d27a7ba3f36fe1eb1ff5bf240f0bb923389511a8d52b8a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae7) socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth1_to_batadv\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:53:55 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x6000000) 18:53:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:55 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:55 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmdt(0x0) shmdt(0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:53:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xcbf, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:55 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) readahead(r1, 0x1000, 0x100000000) sendfile(r0, r1, &(0x7f0000000040)=0x5a70000000000, 0x8) 18:53:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x81, 0x0, 0xfff7}) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x10000, 0x7, 0x2, 0x81}) 18:53:55 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834d40f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e503fee32de576970308a4a6e8681f1f7d4666d7035828c4690bca329e3b00"/82], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, r1, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f00000000c0)={0x10}) 18:53:55 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x8000000) 18:53:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x288}, 0x0, 0x0, r0, 0x9) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffff, 0x303400) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x7ff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x10}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{r1}, 0x1, &(0x7f0000000080)=[0x3f], 0x3, 0x3, [0xff, 0x0, 0x5, 0x8]}) 18:53:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x40, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x10000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x40, 0x8}) 18:53:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2500, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:53:56 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b13f000000be4ab159e5970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"], 0x52) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00200100aaaaa0aaaa34"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) close(r0) 18:53:56 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x45) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0xff}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xf4a7}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x81}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c5037f4da789"}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x220, 0x20}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x2, 0x0, 0x0, {0x6, 0x0, 0x0, 0x20a, 0x0, 0x1, 0x1}, 0x300, 0x10000, 0x40}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x2, 0x0, {0x2, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x3, 0x5f}}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15a4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40c8044}, 0x4000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x23c, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc422}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x91a9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "63d9d3de24639ecd130c52fc75b093f46e8c6075822607dc"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "85a86d703e561046948f4b4a6d0433f2331cdc084f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x657d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb, 0x3, "2ae8a96f1e89bd"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb0}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9021018f81246a3feffbd0464db8f67622a152d7bb9cb7d1029d"}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x30002, 0x100) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000680)={0x7ff, 0x1, 0x20}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6611, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x98, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4020001) [ 1965.823374] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1965.824164] CPU: 0 UID: 0 PID: 12230 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1965.824190] Tainted: [W]=WARN [ 1965.824195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.824203] Call Trace: [ 1965.824208] [ 1965.824217] dump_stack_lvl+0xfa/0x120 [ 1965.824242] dump_header+0x107/0x950 [ 1965.824265] oom_kill_process+0x278/0xa00 [ 1965.824284] out_of_memory+0x34b/0x1690 [ 1965.824307] ? __pfx_out_of_memory+0x10/0x10 [ 1965.824331] mem_cgroup_out_of_memory+0x164/0x190 [ 1965.824356] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1965.824380] ? mark_held_locks+0x49/0x80 [ 1965.824398] try_charge_memcg+0x81f/0xf30 [ 1965.824420] ? __pfx_try_charge_memcg+0x10/0x10 [ 1965.824443] charge_memcg+0x7b/0x290 [ 1965.824458] __mem_cgroup_charge+0x28/0x90 [ 1965.824476] __handle_mm_fault+0x14b5/0x3310 [ 1965.824496] ? __pfx_perf_trace_lock+0x10/0x10 [ 1965.824511] ? __pfx___handle_mm_fault+0x10/0x10 [ 1965.824528] ? __pte_offset_map_lock+0x190/0x330 [ 1965.824550] ? no_page_table+0xc7/0x220 [ 1965.824567] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1965.824589] handle_mm_fault+0x2c3/0x9b0 [ 1965.824610] __get_user_pages+0x58a/0x2f10 [ 1965.824640] ? __pfx___get_user_pages+0x10/0x10 [ 1965.824661] ? lock_is_held_type+0x9e/0x120 [ 1965.824679] populate_vma_page_range+0x282/0x410 [ 1965.824699] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1965.824717] ? __pfx_find_vma_intersection+0x10/0x10 [ 1965.824734] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1965.824749] __mm_populate+0x100/0x3a0 [ 1965.824769] ? __pfx___mm_populate+0x10/0x10 [ 1965.824789] ? up_write+0x195/0x520 [ 1965.824802] ? lock_is_held_type+0x9e/0x120 [ 1965.824819] __do_sys_mlockall+0x50f/0x5c0 [ 1965.824832] do_syscall_64+0xbf/0x360 [ 1965.824850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.824864] RIP: 0033:0x7fcae51b4b19 [ 1965.824874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.824886] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1965.824898] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1965.824907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1965.824914] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1965.824922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1965.824929] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1965.824948] [ 1965.825011] memory: usage 307200kB, limit 307200kB, failcnt 389 [ 1965.849240] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 18:53:56 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) r5 = syz_open_dev$vcsa(&(0x7f0000000480), 0xffffffffffffff7f, 0x40400) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x0) io_submit(r1, 0x9, &(0x7f00000008c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000040)="41db6946e4c0363785659bf3a69b41d54d49f427bff44ff99927c7377f0e17bf422615959badcabd1be6b0795e6e62b113a7d2d149026ccadc423617d954fedc187196c3b7d7bfe281337191e4976643c9f83675d119c9aeb10f14a3a61e4d2ff0302efee08905b74a54e2f373a6b6b658aade241a7dce5efd9c6c1942f526784f269ac7ed2be06a5d58f2c749a977883e987522feed8a9dd533300b210979e5cd421b3cd757161f74ead9bbab56d29f11c9f8949af76667a110a61cc36fc5c4d542b6", 0xc3, 0x7fffffff, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, &(0x7f0000000180)="9e1c42fc01cca2fe12c2929e099944a34ab7d95cc9b50581adc0fe49fdf8df798d84298c4f97d7e1f509165ee2e6e4b2319e57bcbec54f136f245bf5d87727b6286dd4535db2348cb5d46b0a59260c", 0x4f, 0x80, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f00000003c0)="933a338bfb2c681c4febf47f5beb37c3a8daa68af47c7950b45b34019c1f545e35057d17f3e87c36d6f2f05bb2d7692701bfd03c82d32375acb7c5621b2351124da83512a6663dfdcc95ce860c85796dfd46622c194f26b8f5df7cee24b4474b63df30d4a779e2629259b1ea45dfe8fa57c5d86324f89c849df66e041e20ef338944a4587f3d84f2ee19aeb768cc37ec3dcddf8dc06e85be95f81311c8fd", 0x9e, 0x3f, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="311b86d4d0c583099c5261af58ced6e4a8da2b77690eaf09e316ffff563372d9a860de5ed3a7efe3f622a288272ffdbaa1ea4aab2be5b543", 0x38, 0x3, 0x0, 0x0, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f0000000500)="2fcd3c7b12ee63871e69af280983f241cd676b89b876affbd8ed3c1ac1feb849b64c848a2cbcc5fc85ec0e7f24489b451f8cf6dc6e4d8a5a123f3116a9607c9deee96e08dbe2804bb1330ac865b41dca2b6da2140cdb8fe4261d0d7ad15e78d563a047fed7bc5ccaf340234d0cb1b8b9496bc5585ea6c20ca662f4931e354c28952e47c72512e23fe846b74e9fb3244610be29d94e57010344fa2b2b99af5434f45fe32791246fe2c6059e1e03ad6a916883b1", 0xb3, 0x20, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0xfffb, r7, &(0x7f0000000600)="fe6021809716af3b2755026dd6f4cb41151da01d2514b37c3f890524b68ef4af92ea2a5f6bc58f", 0x27, 0x7, 0x0, 0x5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000680)="e12292d2bfd8cf915c271a4054fec0c612feb1b6ad2123eb06f40874b8c16193d069ae08af", 0x25, 0x10000, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x1f, r0, &(0x7f0000000700)="91330c45a8b5e58b354d65b65f618ceb5fc5ce23082794b3ecaa0453fa1d79cab459ba942c5b9720ea22a62dbb56c1b3270f42cd6f7454741a1aa62202d5d05944b61943a3800978aac00196f16e97e3c16cb4e84a2db296ddbbbde5894af8228c3862b12db8693b9e5d03908b60eea40ce1a1787cf48acca13007b314ddead920d21f768bbfad84c8c2d47c13b7d47c2ebf4befd2a5aa", 0x97, 0x5, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x2, r8, &(0x7f0000000800)="5087a5d09120b4519883cadb95da1367dea461882ca2e5e878e357214d45beb8a40c6cdbd716026178687351d5a261f9661cfd07cd60fcccd368ee4ae36cf0e504e093eeda5f1550a0a6bd6e2e3f0988", 0x50, 0x3, 0x0, 0x2}]) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:53:56 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560e, &(0x7f0000000140)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000840)=0xffffffff) socketpair(0x2a, 0x6, 0x80000001, &(0x7f0000000640)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xffffffffffffff87, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4814) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x81, 0x6, 0x9}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3f, 0x2, 0x0, 0xc7, 0x1f}, 0x55, &(0x7f00000000c0)={0x5, 0xf, 0x55, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x1, 0xd7, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0x8, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xfe, 0x7, 0x80}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x0, 0x780, 0x8000, [0x3ff7, 0x0, 0x3f, 0x78f80e5ae9ccff31]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xdc, 0x7, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x7, 0x3, 0x200, 0xfc}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44a}}]}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6008080}, 0x20044010) syz_usb_control_io$printer(r3, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x40, 0xc, 0x11, {0x11, 0x5, "d66688e500d74c1aba98e07cbcbf4b"}}, &(0x7f0000000200)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "aacfe218cec133f81739abb33d8d90c221f07b8ee2259079a6ce97b08d401eaf7b4908db3730d364143668d51b766b9522a60a2233a8ce07196f184a6f96a4697b723f3cf386306770c98e9199846494ba63cfcc8c87285f448bc3f79377276cb386ad78804d7da932b237726b938caa72bd070612c63b482e12eaf3235ee051e6f65e1fa77c21be35c9331dcd848c5f3fe1b1583e818f19fb"}}}, &(0x7f0000000600)={0x34, &(0x7f00000003c0)={0x20, 0x11, 0x90, "c0b0f08dd8f586070bd88430f4393b9b0997b0f20f177eeeac0f7f61e277c7b4032fb1e7cc7201cbf806279bc46b3d009820372bd54f04195c128cec69f091280e6c987073691c0a99cd378ec89fb4ff81c7e1ac84e3ed7077c9e3b8133706cfbca12ba97ec8ac58f7ca7ac7c41c2938c117433ca8d003122a78a36754934d09a77ea183ce49f0bfdb4dd63f0b8d6c39"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x83, {0x81, "5b68ca96693dd2b1802eb3e583a3c101f8aa2a0403ae192aed86aeb456c4c40d2c7c624a6f03da7ef844851e6b87a152d132a037a63d36a8bd3dedc8925e33e94e0ed091e7f4b28694e2efe783e83c1d6934028ed764cb075ca79b773ee753e6e4513cc99283c9742931d62f632fcbac604aaa39e24583748d47a073bda0948df5"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x6}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x3) [ 1965.849869] Memory cgroup stats for /syz5: [ 1965.966707] anon 35647488 [ 1965.967308] file 277651456 [ 1965.967597] kernel 1273856 [ 1965.967882] kernel_stack 65536 [ 1965.968211] pagetables 253952 [ 1965.968513] sec_pagetables 0 [ 1965.968799] percpu 64 [ 1965.969025] sock 0 [ 1965.969258] vmalloc 0 [ 1965.969488] shmem 269262848 [ 1965.969757] file_mapped 8388608 [ 1965.970055] file_dirty 0 [ 1965.970330] file_writeback 0 [ 1965.970614] swapcached 0 [ 1965.970862] inactive_anon 269303808 [ 1965.971213] active_anon 4096 [ 1965.971499] inactive_file 0 [ 1965.971765] active_file 0 [ 1965.972018] unevictable 43991040 [ 1965.972358] slab_reclaimable 823840 [ 1965.972691] slab_unreclaimable 154712 [ 1965.973039] slab 978552 [ 1965.973299] workingset_refault_anon 0 [ 1965.973645] workingset_refault_file 0 [ 1965.973987] workingset_activate_anon 0 [ 1965.974363] workingset_activate_file 0 [ 1965.974717] workingset_restore_anon 0 [ 1965.975059] workingset_restore_file 0 [ 1965.975437] workingset_nodereclaim 0 [ 1965.975771] pgdemote_kswapd 0 [ 1965.976057] pgdemote_direct 0 [ 1965.976373] pgdemote_khugepaged 0 [ 1965.976691] pgdemote_proactive 0 [ 1965.976999] pgscan 579 [ 1965.977255] pgsteal 9 [ 1965.977483] pswpin 0 [ 1965.977703] pswpout 0 [ 1965.977927] pgscan_kswapd 0 [ 1965.978216] pgscan_direct 579 [ 1965.978503] pgscan_khugepaged 0 [ 1965.978809] pgscan_proactive 0 [ 1965.979130] pgsteal_kswapd 0 [ 1965.979416] pgsteal_direct 9 [ 1965.979695] pgsteal_khugepaged 0 [ 1965.980002] pgsteal_proactive 0 [ 1965.980327] pgfault 412958 [ 1965.980565] pgmajfault 0 [ 1965.980769] pgrefill 12360 [ 1965.980984] pgactivate 39108 [ 1965.981233] pgdeactivate 576 [ 1965.981464] pglazyfree 0 [ 1965.981667] pglazyfreed 0 [ 1965.981875] swpin_zero 0 [ 1965.982097] swpout_zero 0 [ 1965.982310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12227,uid=0 [ 1965.983421] Memory cgroup out of memory: Killed process 12227 (syz-executor.5) total-vm:93420kB, anon-rss:34964kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 1966.047820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.049715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:54:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:54:08 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x10000000) 18:54:08 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3847}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:54:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) io_setup(0x0, &(0x7f0000000000)) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:54:08 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmdt(0x0) shmdt(0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:08 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000004640)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x28b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x68b6) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x401, 0x3c3, 0x1}) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000980)={r0, 0x101, 0x9}) getsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000008c0)=""/74, &(0x7f0000000940)=0x4a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000004c0)={0x0, 0x208c, 0x100000001, 0x1}) r5 = open(&(0x7f00000009c0)='./file0\x00', 0x24000, 0x101) ftruncate(r5, 0x3) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x80000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4e) 18:54:08 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xdd, 0x2, 0x5, 0x0, 0x0, 0x100000001, 0x10, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x50808, 0x5, 0xffffffff, 0x0, 0x40, 0x0, 0x1, 0x0, 0x400, 0x0, 0x101}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0) close_range(r0, r1, 0x0) 18:54:08 executing program 3: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001440)=""/170, 0xaa}], 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x0) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000870000/0x2000)=nil) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x7) 18:54:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7fff}, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e7b}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) 18:54:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) 18:54:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x4, @none, 0xfffa}, 0xe) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x24, 0x2) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r4, 0x81, 0x1f, 0x96f}) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:54:08 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x20000000) [ 1978.537777] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1978.539318] CPU: 1 UID: 0 PID: 12296 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1978.539356] Tainted: [W]=WARN [ 1978.539365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1978.539379] Call Trace: [ 1978.539388] [ 1978.539398] dump_stack_lvl+0xfa/0x120 [ 1978.539437] dump_header+0x107/0x950 [ 1978.539479] oom_kill_process+0x278/0xa00 [ 1978.539518] out_of_memory+0x34b/0x1690 [ 1978.539563] ? __pfx_out_of_memory+0x10/0x10 [ 1978.539610] mem_cgroup_out_of_memory+0x164/0x190 [ 1978.539649] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1978.539696] ? mark_held_locks+0x49/0x80 [ 1978.539730] try_charge_memcg+0x81f/0xf30 [ 1978.539774] ? __pfx_try_charge_memcg+0x10/0x10 [ 1978.539818] charge_memcg+0x7b/0x290 [ 1978.539850] __mem_cgroup_charge+0x28/0x90 [ 1978.539886] __handle_mm_fault+0x14b5/0x3310 [ 1978.539926] ? __pfx_perf_trace_lock+0x10/0x10 [ 1978.539954] ? __pfx___handle_mm_fault+0x10/0x10 [ 1978.539988] ? __pte_offset_map_lock+0x190/0x330 [ 1978.540032] ? no_page_table+0xc7/0x220 [ 1978.540065] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1978.540116] handle_mm_fault+0x2c3/0x9b0 [ 1978.540159] __get_user_pages+0x58a/0x2f10 [ 1978.540220] ? __pfx___get_user_pages+0x10/0x10 [ 1978.540261] ? lock_is_held_type+0x9e/0x120 [ 1978.540296] populate_vma_page_range+0x282/0x410 [ 1978.540337] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1978.540374] ? __pfx_find_vma_intersection+0x10/0x10 [ 1978.540406] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1978.540438] __mm_populate+0x100/0x3a0 [ 1978.540478] ? __pfx___mm_populate+0x10/0x10 [ 1978.540532] ? up_write+0x195/0x520 [ 1978.540558] ? lock_is_held_type+0x9e/0x120 [ 1978.540592] __do_sys_mlockall+0x50f/0x5c0 [ 1978.540620] do_syscall_64+0xbf/0x360 [ 1978.540655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.540681] RIP: 0033:0x7fcae51b4b19 [ 1978.540701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.540725] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1978.540750] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1978.540767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1978.540782] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1978.540797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1978.540812] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1978.540850] [ 1978.576922] memory: usage 307200kB, limit 307200kB, failcnt 411 [ 1978.577947] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1978.578926] Memory cgroup stats for /syz5: [ 1978.584447] anon 35647488 [ 1978.585020] file 277651456 [ 1978.585283] kernel 1273856 [ 1978.585511] kernel_stack 65536 [ 1978.585766] pagetables 253952 [ 1978.586016] sec_pagetables 0 [ 1978.586274] percpu 64 [ 1978.586474] sock 0 [ 1978.586653] vmalloc 0 [ 1978.586850] shmem 269262848 [ 1978.587103] file_mapped 8388608 [ 1978.587357] file_dirty 0 [ 1978.587581] file_writeback 0 [ 1978.587822] swapcached 0 [ 1978.588034] inactive_anon 269303808 [ 1978.588335] active_anon 4096 [ 1978.588574] inactive_file 0 [ 1978.588794] active_file 0 [ 1978.589018] unevictable 43872256 [ 1978.589300] slab_reclaimable 823840 [ 1978.589586] slab_unreclaimable 154712 [ 1978.589870] slab 978552 [ 1978.590097] workingset_refault_anon 0 [ 1978.590399] workingset_refault_file 0 [ 1978.590683] workingset_activate_anon 0 [ 1978.590977] workingset_activate_file 0 [ 1978.591285] workingset_restore_anon 0 [ 1978.591569] workingset_restore_file 0 [ 1978.591851] workingset_nodereclaim 0 [ 1978.592161] pgdemote_kswapd 0 [ 1978.592399] pgdemote_direct 0 [ 1978.592654] pgdemote_khugepaged 0 [ 1978.592934] pgdemote_proactive 0 [ 1978.593203] pgscan 579 [ 1978.593396] pgsteal 9 [ 1978.593587] pswpin 0 [ 1978.593772] pswpout 0 [ 1978.593962] pgscan_kswapd 0 [ 1978.594215] pgscan_direct 579 [ 1978.594454] pgscan_khugepaged 0 [ 1978.594722] pgscan_proactive 0 [ 1978.594963] pgsteal_kswapd 0 [ 1978.595228] pgsteal_direct 9 [ 1978.595461] pgsteal_khugepaged 0 [ 1978.595718] pgsteal_proactive 0 [ 1978.595982] pgfault 422011 [ 1978.596214] pgmajfault 0 [ 1978.596434] pgrefill 13126 [ 1978.596666] pgactivate 40516 [ 1978.596908] pgdeactivate 576 [ 1978.597170] pglazyfree 0 [ 1978.597377] pglazyfreed 0 [ 1978.597590] swpin_zero 0 [ 1978.597797] swpout_zero 0 [ 1978.598018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12291,uid=0 [ 1978.599137] Memory cgroup out of memory: Killed process 12291 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:54:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:54:18 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:18 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000580)=""/222, 0xde}], 0x9, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000c40)=""/37, 0x25}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/123, 0x7b}], 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="38bb08000000000000d1000001000000", @ANYRES32, @ANYRES32, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}}, {{0x0, 0x0, &(0x7f0000000dc0)}}], 0x3, 0x0, &(0x7f0000000ec0)={r2, r3+10000000}) 18:54:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/196, 0xc4}], 0xa, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000880), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/183, 0xb7}], 0x1, &(0x7f0000000a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/100, 0x64}], 0x1}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/195, 0xc3}, {&(0x7f0000000d40)=""/84, 0x54}, {&(0x7f0000000dc0)=""/227, 0xe3}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x4, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001340)=[{&(0x7f00000010c0)=""/154, 0x9a}, {&(0x7f0000001180)=""/215, 0xd7}, {&(0x7f0000001280)=""/150, 0x96}], 0x3, &(0x7f0000001380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000013c0), 0x6e, &(0x7f0000002600)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/137, 0x89}, {&(0x7f0000002500)=""/131, 0x83}, {&(0x7f00000025c0)=""/58, 0x3a}], 0x4, &(0x7f0000002640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}], 0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) dup(r1) 18:54:18 executing program 3: madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0xd) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:54:18 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x3ffffe00) 18:54:18 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01000700aaaaaaaaaaaa0180c2000002001809cc1beb4b4b7224b6"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'team_slave_1\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)={'macvtap0\x00'}) 18:54:18 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x200002) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) ioctl$CDROMRESUME(r1, 0x5302) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x10001}) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000140)="299746dc2c3f27d104f1fe54dc32a068c6fb2f97319426b94285cd36df9623851715ed6ee64e970fcbe2749673253460405d5754dfbe4d0fbea98cad424fe3150994c231cdf92d982a33fd2f408888956169f79b341d12b9ca6bec26cb2c2487714ef40b316d8abf271bd9e3502d0e7fd8fdbe7ed9d88fadd12351bb40b39476", 0x80}, {&(0x7f00000001c0)="990231d42322253340a44bab387c90d12dda5b806f0e79a38203da86442525c05ef8dfe53e02677e8124d8ad4027a06ebe2b0216ce89133c5813a0364e2e23f6b27da66712682e9638b1acf71b7c2da7af6f9703def1b569482ba1197f6fe2aaf4964704aa0fd83a8c", 0x69}, {&(0x7f0000000240)="4a3f7bf8177cba407fd4a09ca3da3587888004453060cd7944b28646cdb07c60b12d6eab32e99b3d2c057f8593000a41679690715c7890615d7b3db6039ac417a495f6232e1b2a020f965909a5ea14f4961f49d063308a718b9c260a93daad0c51616166a658bf193551979060fbd01c3a9f1c4405c23fb556b6473c252e5815a1b8c39fcc97e5aaea19cdb014894a78dcb5d57669e1056f81acaf39f0d89ccf548ea26109b86083eaadc91cc201cfb5ebc7e148f119f4b8a0992f2b17ca263f0f100717ad80732562f1e18983a2f2ce4f30ea13cb54efc04896a8fa38e614e9ec4e80cb8592d6c81d", 0xe9}], 0x4, 0x8, 0x8) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000080)) fspick(r2, &(0x7f0000001400)='./file0\x00', 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x18) 18:54:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1411c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x42418, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0xac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x20, 0x1) 18:54:18 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x25b1491d6c80073f, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x601, 0x2, 0x0, 0x2, 0x0, 0x8aef}, 0x0, 0x1000, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfff, 0x4) 18:54:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:54:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000004640)) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x400, 0x2}, 0xe) 18:54:18 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101a00, 0xe2) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:54:18 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x81, 0x20, 0x2c, 0x0, 0x9, 0x20003, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2ed, 0x0, @perf_config_ext={0x81, 0x100000000}, 0x1120, 0x9, 0x9, 0x8, 0x4, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0xb, r1, 0x8) 18:54:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) io_cancel(0x0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000000)="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", 0x1000, 0x6, 0x0, 0x1}, &(0x7f0000001040)) 18:54:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x8, 0x3, 0x70, 0x9d, 0x0, 0x724, 0x10800, 0xcfc9f785ffaa7c5c, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000200), 0x7}, 0x5001, 0x5, 0x1, 0x5, 0x8, 0x3, 0x6, 0x0, 0x9e06, 0x0, 0x101}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x464, 0x100, 0x70bd29, 0x25dfdbfd, "3c68f58088fec181b2363207eb6e5fe43c1a3b427c99b218ff9c7ef517892032829b0d967b6671ff68f9178e08c999d16bcf15b109f9d90604059f0a3c3f771d43bbca9a1f40edb9a5a60b87a398b2910205e11640ca39dd13bc5a969100e5325d654618ecf4376e5805c05a7d3c2e42016198c73e735aec7b7185b6f8488cda03d49a724800936f1375da1d770c67d72b49dcf8c626abcb15545f1e5d567adcde0cc5ca02cb2969fb4dbea89febdad38f", ["", "", "", "", "", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000}, 0x80) [ 1988.635578] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1988.636436] CPU: 0 UID: 0 PID: 12343 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 1988.636456] Tainted: [W]=WARN [ 1988.636460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1988.636468] Call Trace: [ 1988.636473] [ 1988.636479] dump_stack_lvl+0xfa/0x120 [ 1988.636502] dump_header+0x107/0x950 [ 1988.636525] oom_kill_process+0x278/0xa00 [ 1988.636544] out_of_memory+0x34b/0x1690 [ 1988.636567] ? __pfx_out_of_memory+0x10/0x10 [ 1988.636591] mem_cgroup_out_of_memory+0x164/0x190 [ 1988.636611] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1988.636648] ? mark_held_locks+0x49/0x80 [ 1988.636667] try_charge_memcg+0x81f/0xf30 [ 1988.636689] ? __pfx_try_charge_memcg+0x10/0x10 [ 1988.636712] charge_memcg+0x7b/0x290 [ 1988.636728] __mem_cgroup_charge+0x28/0x90 [ 1988.636745] __handle_mm_fault+0x14b5/0x3310 [ 1988.636766] ? __pfx_perf_trace_lock+0x10/0x10 [ 1988.636781] ? __pfx___handle_mm_fault+0x10/0x10 [ 1988.636798] ? __pte_offset_map_lock+0x190/0x330 [ 1988.636820] ? no_page_table+0xc7/0x220 [ 1988.636837] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1988.636859] handle_mm_fault+0x2c3/0x9b0 [ 1988.636880] __get_user_pages+0x58a/0x2f10 [ 1988.636910] ? __pfx___get_user_pages+0x10/0x10 [ 1988.636931] ? lock_is_held_type+0x9e/0x120 [ 1988.636949] populate_vma_page_range+0x282/0x410 [ 1988.636969] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1988.636988] ? __pfx_find_vma_intersection+0x10/0x10 [ 1988.637004] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 1988.637020] __mm_populate+0x100/0x3a0 [ 1988.637040] ? __pfx___mm_populate+0x10/0x10 [ 1988.637061] ? up_write+0x195/0x520 [ 1988.637077] ? lock_is_held_type+0x9e/0x120 [ 1988.637094] __do_sys_mlockall+0x50f/0x5c0 [ 1988.637110] do_syscall_64+0xbf/0x360 [ 1988.637129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.637142] RIP: 0033:0x7fcae51b4b19 [ 1988.637153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1988.637165] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1988.637178] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 1988.637187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1988.637194] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1988.637202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1988.637209] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 1988.637228] [ 1988.656422] memory: usage 307200kB, limit 307200kB, failcnt 439 [ 1988.656919] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1988.657877] Memory cgroup stats for /syz5: [ 1988.659358] anon 35647488 [ 1988.659921] file 277651456 [ 1988.660178] kernel 1273856 [ 1988.660426] kernel_stack 65536 [ 1988.660701] pagetables 253952 [ 1988.660955] sec_pagetables 0 [ 1988.661223] percpu 64 [ 1988.661422] sock 0 [ 1988.661606] vmalloc 0 [ 1988.661804] shmem 269262848 [ 1988.662040] file_mapped 8388608 [ 1988.662324] file_dirty 0 [ 1988.662543] file_writeback 0 [ 1988.662789] swapcached 0 [ 1988.663006] inactive_anon 269303808 [ 1988.663311] active_anon 4096 [ 1988.663558] inactive_file 0 [ 1988.663792] active_file 0 [ 1988.664015] unevictable 43835392 [ 1988.664309] slab_reclaimable 823840 [ 1988.664603] slab_unreclaimable 154712 [ 1988.664915] slab 978552 [ 1988.665140] workingset_refault_anon 0 [ 1988.665442] workingset_refault_file 0 [ 1988.665740] workingset_activate_anon 0 [ 1988.666047] workingset_activate_file 0 [ 1988.666373] workingset_restore_anon 0 [ 1988.666679] workingset_restore_file 0 [ 1988.666984] workingset_nodereclaim 0 [ 1988.667295] pgdemote_kswapd 0 [ 1988.667552] pgdemote_direct 0 [ 1988.667800] pgdemote_khugepaged 0 [ 1988.668092] pgdemote_proactive 0 [ 1988.668367] pgscan 579 [ 1988.668571] pgsteal 9 [ 1988.668782] pswpin 0 [ 1988.668975] pswpout 0 [ 1988.669195] pgscan_kswapd 0 [ 1988.669443] pgscan_direct 579 [ 1988.669705] pgscan_khugepaged 0 [ 1988.669977] pgscan_proactive 0 [ 1988.670262] pgsteal_kswapd 0 [ 1988.670515] pgsteal_direct 9 [ 1988.670774] pgsteal_khugepaged 0 [ 1988.671051] pgsteal_proactive 0 [ 1988.671345] pgfault 431064 [ 1988.671589] pgmajfault 0 [ 1988.671812] pgrefill 13984 [ 1988.672049] pgactivate 41876 [ 1988.672319] pgdeactivate 576 [ 1988.672574] pglazyfree 0 [ 1988.672807] pglazyfreed 0 [ 1988.673040] swpin_zero 0 [ 1988.673292] swpout_zero 0 [ 1988.673522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12335,uid=0 [ 1988.674738] Memory cgroup out of memory: Killed process 12335 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:54:29 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:29 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:29 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3bf0bc20b397dfba65da50a33a13bbf1e8807a7fb779"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) dup2(r2, r1) close(r0) 18:54:29 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x7fefe600) 18:54:29 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) sendfile(r0, r0, &(0x7f0000000140)=0xa2, 0x401) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x40, 0x4a1000) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000100)) sendfile(r1, r0, &(0x7f0000000080)=0x35800840, 0x0) 18:54:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 18:54:29 executing program 0: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101a00, 0xe2) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:54:29 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x2000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2e, 0xff, 0x3f, 0xdf, 0x0, 0x653fdf7800000000, 0x200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x8000, 0x7fff, 0x80000001, 0x0, 0x1000, 0x3, 0x8, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0xc, r0, 0x9) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/sr_mod', 0x4200, 0x140) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) 18:54:29 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:29 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000040)) 18:54:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6f08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mlock(&(0x7f0000873000/0x4000)=nil, 0x4000) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:54:29 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x7fffe600) 18:54:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:54:29 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'gretap0\x00'}) close(r0) 18:54:29 executing program 0: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01000700aaaaaaaaaaaa0180c2000002001809cc1beb4b4b7224b6"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'team_slave_1\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)={'macvtap0\x00'}) 18:54:29 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:48 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffe9, 0x0) 18:54:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) 18:54:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa00, 0x3) r1 = memfd_secret(0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = dup2(r1, r0) recvmmsg$unix(r2, &(0x7f0000004680)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000001200)=[{&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, &(0x7f0000001240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000013c0)=""/2, 0x2}], 0x1}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/90, 0x5a}, {&(0x7f0000002540)=""/160, 0xa0}], 0x3, &(0x7f0000002640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002740)=""/169, 0xa9}, {&(0x7f0000002800)=""/180, 0xb4}, {&(0x7f00000028c0)=""/113, 0x71}], 0x3, &(0x7f0000002980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000029c0), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002a40)=""/34, 0x22}, {&(0x7f0000002a80)=""/251, 0xfb}], 0x2, &(0x7f0000002bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002d00)=@abs, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/140, 0x8c}, {&(0x7f0000002ec0)=""/227, 0xe3}, {&(0x7f0000002fc0)=""/187, 0xbb}], 0x4, &(0x7f00000030c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003140)=""/33, 0x21}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/236, 0xec}, {&(0x7f0000004280)=""/81, 0x51}], 0x4, &(0x7f0000004340)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x8, 0xf4be41dfd717fadf, &(0x7f0000004480)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xc2d5, 0x5, 0x200, 0x4, 0x6f, 0x9, 0x403}, 0xc) 18:54:48 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:48 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socketpair(0xf, 0x1, 0xe598, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000980)='./file0\x00', 0x1, 0x4, &(0x7f0000001b80)=[{&(0x7f00000009c0)="a050b8374c815af57e2ccf51b559e4fe9b15658702701bc02f872021ff0eea4a88ad4837149918b8bd6e1ef617833007f6f05b9c576c99ac3c534fdd37fd2330485cefc72f40758445b9fc8fe6bc66be83bfd6b136b7381e144a24bce541aa6a73", 0x61, 0xfffffffffffffffc}, {&(0x7f0000000a40)="038a728215bf4837dd966ff598e9366c80e3afcd291fdd5868c9d7e50bf31a201300641653528f9013ad3ddb0cf60864fa363434833288b5d3604c6b574dbdc91d95f20ce622f568ff799578244382276c5e0fcdcc8d81953ba6f92a6c5348d1c3ff", 0x62, 0x1000}, {&(0x7f0000000ac0)="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", 0x1000, 0x6}, {&(0x7f0000001ac0)="c05cf6d8e1ac987eef5764c54cc6612cc4593a63ec8e95b3b2c7ebee14d7e15a2751976513fc2e7c1da08410dfee2aee4106dc087b7208a87fbdb9db47cd185b0f46f0a0f2a0886392ff50bf6bf72f5422427f701ef2c729c6513f761e225481329c936a0e3deb3623f3c2ed0a25019648bfaaf7a054130b3a300bdda62869b9371811c2ec967e0a96bfcec76fabb9bab3190402", 0x94, 0x39a}], 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='max_batch_time=0x0000000000000024,barrier,defcontext=staff_u,smackfstransmute=/dev/net/tun\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',obj_role=vcan0\x00,euid=', @ANYRESDEC=0xee00, @ANYBLOB="e09c2afed12c00f445b418a2ab30ab693467c57634ed64d9e0da3e246c2a82f62a011d86c8557b5865287899813d17886ce37dd62f6f5ffc766fad2e3c1313df07a2219985d9cf7f98b0acbdad1ad76c6289a94df56f55289c44c38e371792831ee1700e4f3438f2a5bd47fc5f40cdcedba4bb90900c450d128b3a7de2"]) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001cc0), 0x100, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="9eff37484747c9cd51bc83170370c703109e25bf85f3bb940e77ad225d5dea713971", 0x22}, {&(0x7f0000000140)="2413fd3b528833", 0x7}], 0x2, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb0, 0x40010}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)="1ae0f9aec6625fbb289ec503d895ceda3a7d1c7db7de3cd5e1826447d8ae4236f1dba8cb20ff29ea267fb2bd781076059f41c67f19cce05e959f64cc3069fc6462b03b1f9813fb7f376d6cac9f22d5151d5cc4b693a8c1c791e0eac4b89d1c00feded7d3133d53f2b3ffb31f8a53cb4a29e9f624d4d50bd2151dde264523eaab7bf57aace27e8e664ec00b738338e6488a7d6774d3b16a14982769a03a813d092c205e1841bbbc64b27a77fba9ff4c508a12dc764840dab04e5bd414b2405889a39b", 0xc2}, {&(0x7f0000000600)="006766c1a614ada8f282518ca6b7c283787d765ee3aa9daeec06e063f2519de90800e02d84f05ec58e180b8abeb6f67652ed05bc10f855453802fb626bc3928907b2b22602ce6374af2fe48af59952c75e241700a3d6f771a9a3f8f84c", 0x5d}, {&(0x7f0000000680)="e76c094475db55f77398773ead885cd8fc5817a5308376d92e8f25c1a398619a54221c7971eaedad588c", 0x2a}, {&(0x7f00000006c0)="34ec79ff4d3b6b", 0x7}, {&(0x7f0000000700)="76a78fcea4983f2d81dfc66a22a5a39c8e1dbb5993bb8a0233ff470d7fbf97f2aa8a26339d", 0x25}], 0x5, &(0x7f0000001d00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="f2a889e481", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0xf8, 0x4000}}, {{&(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001e80)="e96f1366b9f71d81d59d8b09f49cb038f55d9a7bd9be8d99b8b1452c28389f77de8527cbdb920c4fbbfb92c0d4edd9a5e45f5474c34eac8a3a6c811bed28adc904c6fd53", 0x44}, {&(0x7f0000001f00)="7fa86623e83fa1d9dfa2b83b9403775f16248e45a74068a1654310aef55a118eb67868efb71584fce5a9f085c71b2bb3598e7a33afa0c8ee42468128429de55fb797b37c158d6c37a9be08edc06a6e207fb9fa640158c056c2f9a6ede29279f0da9f840252e2e1db6210b55d0f222ae79c8aaaa7f5a2ee23aad339e8522f1add0be09411184d5e3fb284c7a58cf05b0e75faaf34764354e1b4ed961b98206851ca0f3bae3ff25ae814a7d05880e8bb985fc9df5a2d55561354fd6e25e16a0ea3fa5c14307efc2439312915bd0b46604ccaa3ceab9f312638bb", 0xd9}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="b8e30bcce935cf80907800e1262a0a22a3f7f7dd813bb191ebd1", 0x1a}, {&(0x7f0000003040)="ec7f5b26c30e5fd37aae703104f4c6b93a8d6ea18851f3ff35", 0x19}, {&(0x7f0000003080)="4540e0dab30264a44f4b15e233581f2161e3e0173ba557aa0cbf2a708110f07e298c5909dfec80a0c6d9bf892c74d03e6b4fa6af82e049001cbaa1107f3b11eab93a4041c6726d736c6686d5e8a859e3cb9132765aea8ec4be0f95120e23aa0497a4aecbc1e4389e1fd29a837d19769398f2d7bc46722716c7dc87d086ac305cd149abb83499637e722b88cfc5922c06", 0x90}], 0x6, 0x0, 0x0, 0x4000011}}], 0x3, 0x24004080) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0xfd, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r8) 18:54:48 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:54:48 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x7ffff000) 18:54:48 executing program 0: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3847}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:54:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:54:48 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xed4) creat(&(0x7f0000000040)='./file0\x00', 0x182) 18:54:48 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x11) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 18:54:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:54:48 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xff600000) 18:54:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x81, 0x0, 0xfff7}) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x10000, 0x7, 0x2, 0x81}) 18:54:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xffff, 0x200) dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup(r0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000000040)) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008140}, 0x40800) 18:54:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:54:48 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x8000, 0x200000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vcan0\x00'}) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/211) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 2018.678787] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2018.680563] CPU: 0 UID: 0 PID: 12436 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2018.680607] Tainted: [W]=WARN [ 2018.680616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2018.680632] Call Trace: [ 2018.680642] [ 2018.680654] dump_stack_lvl+0xfa/0x120 [ 2018.680696] dump_header+0x107/0x950 [ 2018.680742] oom_kill_process+0x278/0xa00 [ 2018.680785] out_of_memory+0x34b/0x1690 [ 2018.680834] ? __pfx_out_of_memory+0x10/0x10 [ 2018.680887] mem_cgroup_out_of_memory+0x164/0x190 [ 2018.680929] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2018.680996] ? mark_held_locks+0x49/0x80 [ 2018.681035] try_charge_memcg+0x81f/0xf30 [ 2018.681089] ? __pfx_try_charge_memcg+0x10/0x10 [ 2018.681138] charge_memcg+0x7b/0x290 [ 2018.681173] __mem_cgroup_charge+0x28/0x90 [ 2018.681212] __handle_mm_fault+0x14b5/0x3310 [ 2018.681255] ? __pfx_perf_trace_lock+0x10/0x10 [ 2018.681287] ? __pfx___handle_mm_fault+0x10/0x10 [ 2018.681324] ? __pte_offset_map_lock+0x190/0x330 [ 2018.681372] ? no_page_table+0xc7/0x220 [ 2018.681408] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2018.681457] handle_mm_fault+0x2c3/0x9b0 [ 2018.681503] __get_user_pages+0x58a/0x2f10 [ 2018.681570] ? __pfx___get_user_pages+0x10/0x10 [ 2018.681615] ? lock_is_held_type+0x9e/0x120 [ 2018.681652] populate_vma_page_range+0x282/0x410 [ 2018.681697] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2018.681738] ? __pfx_find_vma_intersection+0x10/0x10 [ 2018.681772] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2018.681807] __mm_populate+0x100/0x3a0 [ 2018.681851] ? __pfx___mm_populate+0x10/0x10 [ 2018.681896] ? up_write+0x195/0x520 [ 2018.681925] ? lock_is_held_type+0x9e/0x120 [ 2018.681962] __do_sys_mlockall+0x50f/0x5c0 [ 2018.681992] do_syscall_64+0xbf/0x360 [ 2018.682031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.682059] RIP: 0033:0x7fcae51b4b19 [ 2018.682080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2018.682107] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2018.682133] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2018.682152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2018.682167] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2018.682183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2018.682200] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2018.682241] [ 2018.722726] memory: usage 307200kB, limit 307200kB, failcnt 474 [ 2018.723794] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2018.724856] Memory cgroup stats for /syz5: [ 2018.731344] anon 35635200 [ 2018.732925] file 277651456 [ 2018.733596] kernel 1286144 [ 2018.734142] kernel_stack 65536 [ 2018.734705] pagetables 253952 [ 2018.735313] sec_pagetables 0 [ 2018.735846] percpu 64 [ 2018.736342] sock 0 [ 2018.736732] vmalloc 0 [ 2018.737204] shmem 269262848 [ 2018.737718] file_mapped 8388608 [ 2018.738319] file_dirty 0 [ 2018.738788] file_writeback 0 [ 2018.739349] swapcached 0 [ 2018.739812] inactive_anon 269303808 [ 2018.740465] active_anon 4096 [ 2018.741012] inactive_file 0 [ 2018.741552] active_file 0 [ 2018.742027] unevictable 43978752 [ 2018.742662] slab_reclaimable 824992 [ 2018.743317] slab_unreclaimable 166832 [ 2018.743963] slab 991824 [ 2018.744441] workingset_refault_anon 0 [ 2018.745131] workingset_refault_file 0 [ 2018.745784] workingset_activate_anon 0 [ 2018.746472] workingset_activate_file 0 [ 2018.747162] workingset_restore_anon 0 [ 2018.747806] workingset_restore_file 0 [ 2018.748477] workingset_nodereclaim 0 [ 2018.749154] pgdemote_kswapd 0 [ 2018.749693] pgdemote_direct 0 [ 2018.750264] pgdemote_khugepaged 0 [ 2018.750850] pgdemote_proactive 0 [ 2018.751461] pgscan 579 [ 2018.751899] pgsteal 9 [ 2018.752352] pswpin 0 [ 2018.752762] pswpout 0 [ 2018.753250] pgscan_kswapd 0 [ 2018.753754] pgscan_direct 579 [ 2018.754319] pgscan_khugepaged 0 [ 2018.754885] pgscan_proactive 0 [ 2018.755466] pgsteal_kswapd 0 [ 2018.755990] pgsteal_direct 9 [ 2018.756544] pgsteal_khugepaged 0 [ 2018.757164] pgsteal_proactive 0 [ 2018.757730] pgfault 440285 [ 2018.758250] pgmajfault 0 [ 2018.758711] pgrefill 14842 [ 2018.759233] pgactivate 43319 [ 2018.759754] pgdeactivate 576 [ 2018.760308] pglazyfree 0 [ 2018.760771] pglazyfreed 0 [ 2018.761290] swpin_zero 0 [ 2018.762965] swpout_zero 0 [ 2018.764268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12432,uid=0 [ 2018.766746] Memory cgroup out of memory: Killed process 12432 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56284kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:55:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x81, 0x0, 0xfff7}) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x10000, 0x7, 0x2, 0x81}) 18:55:01 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) read(r0, &(0x7f0000000000)=""/179, 0xb3) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 18:55:01 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e74408d0000a6e834940f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f1779ed0ae3094ec2cf47288f8895dc8ae8681f1f7d4666d7035828c4690bca329e3b00"/85], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:01 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x100000000000) 18:55:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @empty, 0x54d322f2}, 0x1c) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x89, 0x6, 0x2, "90b3946df5794c5dbf97c4a83ae202da", "61b310fa245d721e5af349696b919c5abce4e457aef31b013b5a2c5894f1fd6cedea5c42b0649fca9c0321e62e8cb628a5fe80df93c59a18f952e02d8698e64f88fa9592f70e982159b2f976251077ba8e2d1a3245f4524399a87f191d53617f0c91601c1e5346c7f3bd30a5f9f56174024b3858"}, 0x89, 0x0) 18:55:01 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:01 executing program 6: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "40ee9355bdf368a3bcb1b6ac1e21a3c40746b2ea683a4cd5"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x4004000) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x440) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x19c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbd8d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc07}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x3, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x4002, 0x0, 0x80000000, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 18:55:01 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x3f, 0x0, 0x2d, 0x0, 0x8be, 0x20, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001}, 0x800, 0x0, 0x10001, 0x7, 0x2, 0xfc000000, 0x2f0, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r0, 0x3) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) [ 2031.021116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2031.021846] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2031.022824] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2031.023764] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2031.024705] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2031.025618] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2031.026540] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:01 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005880)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/63, 0x3f}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000001640)=""/5, 0x5}], 0x8, &(0x7f0000001700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001800)=""/221, 0xdd}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/21, 0x15}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x4, &(0x7f0000003980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/173, 0xad}], 0x2, &(0x7f0000004b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004bc0)=@abs, 0x6e, &(0x7f0000005000)=[{&(0x7f0000004c40)}, {&(0x7f0000004c80)=""/226, 0xe2}, {&(0x7f0000004d80)=""/78, 0x4e}, {&(0x7f0000004e00)=""/238, 0xee}, {&(0x7f0000004f00)=""/223, 0xdf}], 0x5, &(0x7f0000005080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000005200), 0x6e, &(0x7f00000056c0)=[{&(0x7f0000005280)=""/45, 0x2d}, {&(0x7f00000052c0)=""/169, 0xa9}, {&(0x7f0000005380)=""/65, 0x41}, {&(0x7f0000005400)=""/85, 0x55}, {&(0x7f0000005480)=""/69, 0x45}, {&(0x7f0000005500)=""/14, 0xe}, {&(0x7f0000005540)=""/171, 0xab}, {&(0x7f0000005600)=""/191, 0xbf}], 0x8, &(0x7f0000005740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}], 0x5, 0x2, &(0x7f00000059c0)={0x0, 0x3938700}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000005a00)={0x1, 0x3, [@random="7adb8a710d7a", @broadcast, @local]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x6611, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r4, r6, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ftruncate(r3, 0x61) 18:55:01 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x60ffffffffff) 18:55:01 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x1, 0x2}, 0xe) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @any, 0x5, 0x2}, 0xe) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) pwrite64(r2, &(0x7f0000000040)="b82de93c0dbbc13dc10632b242", 0xd, 0x101) 18:55:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x40, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x10000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000004640)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x40, 0x8}) 18:55:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) shutdown(r1, 0x0) 18:55:01 executing program 3: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xeb, 0xff, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x5910, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x2, 0x3, 0x40, 0x0, 0x0, 0xc4000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x2090, 0x6000000000000000, 0x4, 0x1, 0xc0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x9, r1, 0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:01 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2031.530425] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2031.531263] CPU: 0 UID: 0 PID: 12493 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2031.531284] Tainted: [W]=WARN [ 2031.531288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2031.531298] Call Trace: [ 2031.531304] [ 2031.531309] dump_stack_lvl+0xfa/0x120 [ 2031.531333] dump_header+0x107/0x950 [ 2031.531356] oom_kill_process+0x278/0xa00 [ 2031.531376] out_of_memory+0x34b/0x1690 [ 2031.531399] ? __pfx_out_of_memory+0x10/0x10 [ 2031.531423] mem_cgroup_out_of_memory+0x164/0x190 [ 2031.531444] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2031.531468] ? mark_held_locks+0x49/0x80 [ 2031.531487] try_charge_memcg+0x81f/0xf30 [ 2031.531510] ? __pfx_try_charge_memcg+0x10/0x10 [ 2031.531533] charge_memcg+0x7b/0x290 [ 2031.531549] __mem_cgroup_charge+0x28/0x90 [ 2031.531567] __handle_mm_fault+0x14b5/0x3310 [ 2031.531587] ? __pfx_perf_trace_lock+0x10/0x10 [ 2031.531603] ? __pfx___handle_mm_fault+0x10/0x10 [ 2031.531620] ? __pte_offset_map_lock+0x190/0x330 [ 2031.531642] ? no_page_table+0xc7/0x220 [ 2031.531660] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2031.531682] handle_mm_fault+0x2c3/0x9b0 [ 2031.531703] __get_user_pages+0x58a/0x2f10 [ 2031.531734] ? __pfx___get_user_pages+0x10/0x10 [ 2031.531755] ? lock_is_held_type+0x9e/0x120 [ 2031.531773] populate_vma_page_range+0x282/0x410 [ 2031.531794] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2031.531813] ? __pfx_find_vma_intersection+0x10/0x10 [ 2031.531830] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2031.531846] __mm_populate+0x100/0x3a0 [ 2031.531866] ? __pfx___mm_populate+0x10/0x10 [ 2031.531887] ? up_write+0x195/0x520 [ 2031.531901] ? lock_is_held_type+0x9e/0x120 [ 2031.531918] __do_sys_mlockall+0x50f/0x5c0 [ 2031.531932] do_syscall_64+0xbf/0x360 [ 2031.531951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.531965] RIP: 0033:0x7fcae51b4b19 [ 2031.531975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2031.531987] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2031.532000] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2031.532009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2031.532016] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2031.532024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2031.532032] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2031.532051] [ 2031.532055] memory: usage 307200kB, limit 307200kB, failcnt 511 [ 2031.551531] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.552020] Memory cgroup stats for /syz5: [ 2031.572378] anon 35635200 [ 2031.573537] file 277651456 [ 2031.573958] kernel 1286144 [ 2031.574640] kernel_stack 65536 [ 2031.575340] pagetables 253952 [ 2031.575810] sec_pagetables 0 [ 2031.576444] percpu 64 [ 2031.576811] sock 0 [ 2031.577202] vmalloc 0 [ 2031.577582] shmem 269262848 [ 2031.578025] file_mapped 8388608 [ 2031.578562] file_dirty 0 [ 2031.578957] file_writeback 0 [ 2031.579453] swapcached 0 [ 2031.579860] inactive_anon 269303808 [ 2031.580450] active_anon 4096 [ 2031.580917] inactive_file 0 [ 2031.581402] active_file 0 [ 2031.581827] unevictable 43978752 [ 2031.582369] slab_reclaimable 824992 [ 2031.582905] slab_unreclaimable 166832 [ 2031.583491] slab 991824 [ 2031.583878] workingset_refault_anon 0 [ 2031.584461] workingset_refault_file 0 [ 2031.585014] workingset_activate_anon 0 [ 2031.585614] workingset_activate_file 0 [ 2031.586202] workingset_restore_anon 0 [ 2031.586760] workingset_restore_file 0 [ 2031.587427] workingset_nodereclaim 0 [ 2031.587972] pgdemote_kswapd 0 [ 2031.588465] pgdemote_direct 0 [ 2031.588932] pgdemote_khugepaged 0 [ 2031.589485] pgdemote_proactive 0 [ 2031.589983] pgscan 579 [ 2031.590386] pgsteal 9 [ 2031.590762] pswpin 0 [ 2031.591150] pswpout 0 [ 2031.591519] pgscan_kswapd 0 [ 2031.591947] pgscan_direct 579 [ 2031.592454] pgscan_khugepaged 0 [ 2031.592955] pgscan_proactive 0 [ 2031.593485] pgsteal_kswapd 0 [ 2031.593942] pgsteal_direct 9 [ 2031.594432] pgsteal_khugepaged 0 [ 2031.594923] pgsteal_proactive 0 [ 2031.595443] pgfault 449335 [ 2031.595874] pgmajfault 0 [ 2031.596314] pgrefill 15716 [ 2031.596738] pgactivate 44741 [ 2031.597227] pgdeactivate 576 [ 2031.597682] pglazyfree 0 [ 2031.598117] pglazyfreed 0 [ 2031.598529] swpin_zero 0 [ 2031.598923] swpout_zero 0 [ 2031.599360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12483,uid=0 [ 2031.601557] Memory cgroup out of memory: Killed process 12483 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56284kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:55:13 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:13 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:13 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:13 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x7ffffffff000) 18:55:13 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) dup2(r2, r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:13 executing program 1: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:55:13 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x81, 0x0, 0xfff7}) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x10000, 0x7, 0x2, 0x81}) 18:55:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) 18:55:13 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x2000000000000) 18:55:13 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) connect(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e23, 0x7fff, @private2}}}, 0x80) [ 2043.050769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2043.051736] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2043.053024] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2043.054258] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2043.055471] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2043.056677] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2043.057895] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x4) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffbd}}, './file0/file0\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x25a3, 0x2}}, './file0/file0\x00'}) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x6611, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000040)=0x1) getsockopt$bt_BT_POWER(r5, 0x112, 0xd, 0x0, &(0x7f0000004640)=0xe) [ 2044.004418] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2044.005961] CPU: 0 UID: 0 PID: 12552 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2044.006003] Tainted: [W]=WARN [ 2044.006010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2044.006024] Call Trace: [ 2044.006033] [ 2044.006043] dump_stack_lvl+0xfa/0x120 [ 2044.006092] dump_header+0x107/0x950 [ 2044.006132] oom_kill_process+0x278/0xa00 [ 2044.006169] out_of_memory+0x34b/0x1690 [ 2044.006208] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 2044.006235] ? __pfx_out_of_memory+0x10/0x10 [ 2044.006279] mem_cgroup_out_of_memory+0x164/0x190 [ 2044.006315] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2044.006360] ? mark_held_locks+0x49/0x80 [ 2044.006393] try_charge_memcg+0x81f/0xf30 [ 2044.006434] ? __pfx_try_charge_memcg+0x10/0x10 [ 2044.006476] charge_memcg+0x7b/0x290 [ 2044.006506] __mem_cgroup_charge+0x28/0x90 [ 2044.006539] __handle_mm_fault+0x14b5/0x3310 [ 2044.006577] ? __pfx_perf_trace_lock+0x10/0x10 [ 2044.006604] ? __pfx___handle_mm_fault+0x10/0x10 [ 2044.006635] ? __pte_offset_map_lock+0x190/0x330 [ 2044.006676] ? no_page_table+0xc7/0x220 [ 2044.006707] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2044.006749] handle_mm_fault+0x2c3/0x9b0 [ 2044.006789] __get_user_pages+0x58a/0x2f10 [ 2044.006846] ? __pfx___get_user_pages+0x10/0x10 [ 2044.006884] ? lock_is_held_type+0x9e/0x120 [ 2044.006917] populate_vma_page_range+0x282/0x410 [ 2044.006955] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2044.006989] ? __pfx_find_vma_intersection+0x10/0x10 [ 2044.007019] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2044.007049] __mm_populate+0x100/0x3a0 [ 2044.007087] ? __pfx___mm_populate+0x10/0x10 [ 2044.007125] ? up_write+0x195/0x520 [ 2044.007149] ? lock_is_held_type+0x9e/0x120 [ 2044.007180] __do_sys_mlockall+0x50f/0x5c0 [ 2044.007206] do_syscall_64+0xbf/0x360 [ 2044.007239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.007263] RIP: 0033:0x7fcae51b4b19 [ 2044.007282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2044.007304] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2044.007327] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2044.007342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2044.007356] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2044.007370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.007384] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2044.007419] [ 2044.043415] memory: usage 307200kB, limit 307200kB, failcnt 548 [ 2044.044337] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2044.045254] Memory cgroup stats for /syz5: [ 2044.061457] anon 35635200 [ 2044.062538] file 277651456 [ 2044.062980] kernel 1286144 [ 2044.063456] kernel_stack 65536 [ 2044.063952] pagetables 253952 [ 2044.064450] sec_pagetables 0 [ 2044.064920] percpu 64 [ 2044.065354] sock 0 [ 2044.065700] vmalloc 0 [ 2044.066119] shmem 269262848 [ 2044.066779] file_mapped 8388608 [ 2044.067316] file_dirty 0 [ 2044.067719] file_writeback 0 [ 2044.068239] swapcached 0 [ 2044.068644] inactive_anon 269303808 [ 2044.069223] active_anon 4096 [ 2044.069706] inactive_file 0 [ 2044.070199] active_file 0 [ 2044.070627] unevictable 43978752 [ 2044.071173] slab_reclaimable 824992 [ 2044.071727] slab_unreclaimable 166832 [ 2044.072330] slab 991824 [ 2044.072923] workingset_refault_anon 0 [ 2044.073564] workingset_refault_file 0 [ 2044.074157] workingset_activate_anon 0 [ 2044.074732] workingset_activate_file 0 [ 2044.075357] workingset_restore_anon 0 [ 2044.075929] workingset_restore_file 0 [ 2044.076747] workingset_nodereclaim 0 [ 2044.077371] pgdemote_kswapd 0 [ 2044.077848] pgdemote_direct 0 [ 2044.078400] pgdemote_khugepaged 0 [ 2044.079037] pgdemote_proactive 0 [ 2044.079587] pgscan 579 [ 2044.079986] pgsteal 9 [ 2044.080414] pswpin 0 [ 2044.080780] pswpout 0 [ 2044.081188] pgscan_kswapd 0 [ 2044.081670] pgscan_direct 579 [ 2044.082323] pgscan_khugepaged 0 [ 2044.082994] pgscan_proactive 0 [ 2044.083527] pgsteal_kswapd 0 [ 2044.083998] pgsteal_direct 9 [ 2044.084683] pgsteal_khugepaged 0 [ 2044.085231] pgsteal_proactive 0 [ 2044.085931] pgfault 458385 [ 2044.086397] pgmajfault 0 [ 2044.086806] pgrefill 16605 [ 2044.087290] pgactivate 46218 [ 2044.087753] pgdeactivate 576 [ 2044.088418] pglazyfree 0 [ 2044.088835] pglazyfreed 0 [ 2044.089487] swpin_zero 0 [ 2044.089910] swpout_zero 0 [ 2044.090455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12545,uid=0 [ 2044.092929] Memory cgroup out of memory: Killed process 12545 (syz-executor.5) total-vm:93420kB, anon-rss:34988kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:55:24 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x42) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000000040)=0xfffffffffffffeb1) 18:55:24 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x4000000000000) 18:55:24 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x81, 0x0, 0xfff7}) 18:55:24 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:24 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:24 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) r2 = geteuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) close(r0) 18:55:24 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x10001, 0xc8d41) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x3, [0x7, 0x7], 0x9}, 0x10) [ 2054.700394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2054.701426] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2054.702845] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2054.705038] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2054.707716] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2054.709030] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2054.710346] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:25 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f1ff964b113cf65f0be070000007a9636645f0ae309ae82067afee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b000000ca5104ffffffffffffeeb7f3c1a32619111b9cd78297ad135ba3a06a515327a4a59c2dcafdfe76e700fca42302cd7aeb5cb3f329860d31e637810199654136e8c3ab26af4194651c4cb807d76871202d1703d9"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0x81}, 0x14) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) 18:55:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1001) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x68c402, 0x0) 18:55:25 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308831f1fd6c20747288f8895dca6e8681f1f7d4666d7035828c4690bca329e3bf88f05f25e989bb212ae825e7651a7b8c636e7eb9d40fa4ec9c6ad6c7ecbf106ad773913a1296f1a39a9adf9d5d740034c95632a3ce20e6e45cb46b374dce6a4446452897503d67b18d39e80c6fdca6deecaa06c238f84eeea105cd1ff666f90b2d144f23e65f4903bdaadd429b00eeedf3dc3227f28f6c2179bafc51bd45913053308c7758ca78146dd43c7801556"], 0x52) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0xb5) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(0xffffffffffffffff) 18:55:25 executing program 1: rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfff]}, &(0x7f0000000080), 0x8) rt_sigprocmask(0x2, &(0x7f0000000140)={[0x74]}, &(0x7f0000000180), 0x8) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) signalfd(r0, &(0x7f0000000100)={[0x1]}, 0x8) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x4]}, &(0x7f00000000c0), 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) 18:55:25 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x6000000000000) 18:55:25 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x40000000}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xacb2}}, './file0\x00'}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x5c658f50f5278929, 0x1, [@broadcast]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x6611, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'caif0\x00'}) 18:55:25 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f1ff964b113cf65f0be070000007a9636645f0ae309ae82067afee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b000000ca5104ffffffffffffeeb7f3c1a32619111b9cd78297ad135ba3a06a515327a4a59c2dcafdfe76e700fca42302cd7aeb5cb3f329860d31e637810199654136e8c3ab26af4194651c4cb807d76871202d1703d9"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0x81}, 0x14) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) [ 2054.961183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2054.961926] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2054.962985] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2054.963977] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2054.964958] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2054.965970] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2054.966980] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/202, 0xca}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/147, 0x93}, {&(0x7f0000001440)=""/88, 0x58}], 0x7, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/172, 0xac}, {&(0x7f0000001840)=""/185, 0xb9}, {&(0x7f0000001900)=""/15, 0xf}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/64, 0x40}, {&(0x7f0000002980)=""/162, 0xa2}], 0x8, &(0x7f0000002ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002b80)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000002c40)=""/104, 0x68}, {&(0x7f0000002cc0)=""/156, 0x9c}], 0x4, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/66, 0x42}, {&(0x7f0000002f00)=""/134, 0x86}, {&(0x7f0000002fc0)=""/167, 0xa7}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/100, 0x64}, {&(0x7f0000003140)=""/54, 0x36}], 0x6, &(0x7f0000003200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003240), 0x6e, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/138, 0x8a}, {&(0x7f0000003380)=""/234, 0xea}], 0x2}}, {{&(0x7f00000034c0), 0x6e, &(0x7f0000003780)=[{&(0x7f0000003540)=""/249, 0xf9}, {&(0x7f0000003640)=""/249, 0xf9}, {&(0x7f0000003740)=""/27, 0x1b}], 0x3, &(0x7f00000037c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003900)=""/150, 0x96}, {&(0x7f00000039c0)=""/226, 0xe2}, {&(0x7f0000003ac0)=""/228, 0xe4}, {&(0x7f0000003bc0)=""/205, 0xcd}], 0x4, &(0x7f0000003d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d80)=""/68, 0x44}, {&(0x7f0000003e00)}], 0x2, &(0x7f0000003e80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003ec0), 0x6e, &(0x7f0000004280)=[{&(0x7f0000003f40)=""/117, 0x75}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/65, 0x41}, {&(0x7f0000004040)=""/83, 0x53}, {&(0x7f00000040c0)=""/7, 0x7}, {&(0x7f0000004100)=""/181, 0xb5}, {&(0x7f00000041c0)=""/100, 0x64}, {&(0x7f0000004240)=""/17, 0x11}], 0x8, &(0x7f0000004300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000006780)=[{&(0x7f00000043c0)=""/243, 0xf3}, {&(0x7f00000044c0)=""/114, 0x72}, {&(0x7f0000004540)=""/196, 0xc4}, {&(0x7f0000005680)=""/249, 0xf9}, {&(0x7f0000005780)=""/4096, 0x1000}], 0x5, &(0x7f0000006800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0xa, 0x1, &(0x7f0000006bc0)={0x0, 0x3938700}) 18:55:25 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) shutdown(r1, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) [ 2055.241492] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2055.242836] CPU: 0 UID: 0 PID: 12589 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2055.242870] Tainted: [W]=WARN [ 2055.242877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.242890] Call Trace: [ 2055.242898] [ 2055.242906] dump_stack_lvl+0xfa/0x120 [ 2055.242941] dump_header+0x107/0x950 [ 2055.242978] oom_kill_process+0x278/0xa00 [ 2055.243011] out_of_memory+0x34b/0x1690 [ 2055.243049] ? __pfx_out_of_memory+0x10/0x10 [ 2055.243095] mem_cgroup_out_of_memory+0x164/0x190 [ 2055.243128] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2055.243168] ? mark_held_locks+0x49/0x80 [ 2055.243198] try_charge_memcg+0x81f/0xf30 [ 2055.243234] ? __pfx_try_charge_memcg+0x10/0x10 [ 2055.243272] charge_memcg+0x7b/0x290 [ 2055.243299] __mem_cgroup_charge+0x28/0x90 [ 2055.243329] __handle_mm_fault+0x14b5/0x3310 [ 2055.243362] ? __pfx_perf_trace_lock+0x10/0x10 [ 2055.243386] ? __pfx___handle_mm_fault+0x10/0x10 [ 2055.243415] ? __pte_offset_map_lock+0x190/0x330 [ 2055.243452] ? no_page_table+0xc7/0x220 [ 2055.243479] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2055.243517] handle_mm_fault+0x2c3/0x9b0 [ 2055.243553] __get_user_pages+0x58a/0x2f10 [ 2055.243604] ? __pfx___get_user_pages+0x10/0x10 [ 2055.243638] ? lock_is_held_type+0x9e/0x120 [ 2055.243667] populate_vma_page_range+0x282/0x410 [ 2055.243702] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2055.243733] ? __pfx_find_vma_intersection+0x10/0x10 [ 2055.243759] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2055.243786] __mm_populate+0x100/0x3a0 [ 2055.243820] ? __pfx___mm_populate+0x10/0x10 [ 2055.243854] ? up_write+0x195/0x520 [ 2055.243877] ? lock_is_held_type+0x9e/0x120 [ 2055.243905] __do_sys_mlockall+0x50f/0x5c0 [ 2055.243928] do_syscall_64+0xbf/0x360 [ 2055.243958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.243981] RIP: 0033:0x7fcae51b4b19 [ 2055.243998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.244019] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2055.244039] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2055.244054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2055.244066] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2055.244079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2055.244091] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2055.244123] [ 2055.274854] memory: usage 307200kB, limit 307200kB, failcnt 583 [ 2055.275672] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2055.276493] Memory cgroup stats for /syz5: [ 2055.281202] anon 35635200 [ 2055.281862] file 277651456 [ 2055.282123] kernel 1286144 [ 2055.282371] kernel_stack 65536 [ 2055.282628] pagetables 253952 [ 2055.282887] sec_pagetables 0 [ 2055.283305] percpu 64 [ 2055.283509] sock 0 [ 2055.283689] vmalloc 0 [ 2055.283886] shmem 269262848 [ 2055.284300] file_mapped 8388608 [ 2055.284566] file_dirty 0 [ 2055.284781] file_writeback 0 [ 2055.285025] swapcached 0 [ 2055.285367] inactive_anon 269303808 [ 2055.285665] active_anon 4096 [ 2055.285909] inactive_file 0 [ 2055.286223] active_file 0 [ 2055.286447] unevictable 43937792 [ 2055.286716] slab_reclaimable 824992 [ 2055.287003] slab_unreclaimable 166832 [ 2055.287337] slab 991824 [ 2055.287548] workingset_refault_anon 0 [ 2055.287848] workingset_refault_file 0 [ 2055.288172] workingset_activate_anon 0 [ 2055.288480] workingset_activate_file 0 [ 2055.288787] workingset_restore_anon 0 [ 2055.289115] workingset_restore_file 0 [ 2055.289422] workingset_nodereclaim 0 [ 2055.289714] pgdemote_kswapd 0 [ 2055.289961] pgdemote_direct 0 [ 2055.290236] pgdemote_khugepaged 0 [ 2055.290512] pgdemote_proactive 0 [ 2055.290782] pgscan 579 [ 2055.290985] pgsteal 9 [ 2055.291206] pswpin 0 [ 2055.291405] pswpout 0 [ 2055.291601] pgscan_kswapd 0 [ 2055.291835] pgscan_direct 579 [ 2055.292106] pgscan_khugepaged 0 [ 2055.292370] pgscan_proactive 0 [ 2055.292627] pgsteal_kswapd 0 [ 2055.292871] pgsteal_direct 9 [ 2055.293144] pgsteal_khugepaged 0 [ 2055.293428] pgsteal_proactive 0 [ 2055.293691] pgfault 467435 [ 2055.293919] pgmajfault 0 [ 2055.294165] pgrefill 17411 [ 2055.294395] pgactivate 47526 [ 2055.294638] pgdeactivate 576 [ 2055.294886] pglazyfree 0 [ 2055.295131] pglazyfreed 0 [ 2055.295357] swpin_zero 0 [ 2055.295573] swpout_zero 0 [ 2055.295798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12580,uid=0 [ 2055.297004] Memory cgroup out of memory: Killed process 12580 (syz-executor.5) total-vm:93420kB, anon-rss:34928kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:55:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/69, 0x45}], 0x7}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/214, 0xd6}, {&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/42, 0x2a}, {&(0x7f0000000a40)=""/211, 0xd3}, {&(0x7f0000000b40)=""/25, 0x19}, {&(0x7f0000000b80)=""/235, 0xeb}], 0x9, &(0x7f0000000d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/161, 0xa1}], 0x1, &(0x7f0000001000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000002700)=[{&(0x7f00000011c0)=""/101, 0x65}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/109, 0x6d}, {&(0x7f00000022c0)=""/134, 0x86}, {&(0x7f0000002380)=""/214, 0xd6}, {&(0x7f0000002480)=""/235, 0xeb}, {&(0x7f0000002580)=""/44, 0x2c}, {&(0x7f00000025c0)=""/67, 0x43}, {&(0x7f0000002640)=""/59, 0x3b}, {&(0x7f0000002680)=""/93, 0x5d}], 0xa, &(0x7f00000027c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002900)=[{&(0x7f0000002880)=""/112, 0x70}], 0x1, &(0x7f0000002940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x6, 0x100, &(0x7f0000002bc0)={0x77359400}) 18:55:37 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x8000000000000) 18:55:37 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:37 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:37 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)={{0x107, 0x7f, 0xff, 0x33d, 0x216, 0x5, 0x273, 0x7ff}, "b43ae38c6ddb2c550ca4ec4892647a59bf2ceb6baace2ad899352bd695f03d02d49cf186d4969ed3b9636dd950bfdc6b4ee342fee09b3143f38641757ecd598cc890661f52a0eceade4caa3f72", ['\x00']}, 0x16d) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:37 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) 18:55:37 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f1ff964b113cf65f0be070000007a9636645f0ae309ae82067afee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b000000ca5104ffffffffffffeeb7f3c1a32619111b9cd78297ad135ba3a06a515327a4a59c2dcafdfe76e700fca42302cd7aeb5cb3f329860d31e637810199654136e8c3ab26af4194651c4cb807d76871202d1703d9"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0x81}, 0x14) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) [ 2066.955368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2066.955865] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2066.956605] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2066.957297] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2066.957971] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2066.958654] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2066.959338] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:37 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f1ff964b113cf65f0be070000007a9636645f0ae309ae82067afee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b000000ca5104ffffffffffffeeb7f3c1a32619111b9cd78297ad135ba3a06a515327a4a59c2dcafdfe76e700fca42302cd7aeb5cb3f329860d31e637810199654136e8c3ab26af4194651c4cb807d76871202d1703d9"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0x81}, 0x14) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) 18:55:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x6, 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, @any, 0x5, 0x1}, 0xe) 18:55:37 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:37 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:37 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xa000000000000) 18:55:37 executing program 1: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x91, 0x4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @private}}) r2 = syz_open_dev$vcsn(&(0x7f0000001580), 0x8, 0x604002) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) sendmsg$nl_xfrm(r2, &(0x7f0000002740)={0xfffffffffffffffe, 0x0, &(0x7f0000002700)={&(0x7f00000015c0)=@updsa={0x113c, 0x1a, 0x20, 0x70bd28, 0x25dfdbff, {{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x87, 0x0, r3}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, @in6=@remote, {0x1, 0x1, 0x9, 0xd88c, 0x6, 0x6, 0x7f, 0x4}, {0x40, 0xffffffff, 0x3, 0x6}, {0x2, 0x0, 0x3f80}, 0x70bd29, 0x0, 0xa, 0x2, 0x3f}, [@algo_aead={0x104c, 0x12, {{'aegis128-generic\x00'}, 0x8000, 0xc0, "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"}}]}, 0x113c}, 0x1, 0x0, 0x0, 0x2004c081}, 0x810) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40085}, 0x20000018) 18:55:37 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 2067.238207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2067.239180] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2067.240502] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2067.241758] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2067.243019] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2067.244273] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2067.245514] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:37 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xc000000000000) 18:55:37 executing program 1: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1}, 0xe) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ftruncate(r2, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0xd, 0x0, &(0x7f0000004640)) ppoll(&(0x7f0000000080)=[{r0, 0x1200}, {r1, 0x8000}, {r2, 0x2}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x5]}, 0x8) 18:55:37 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee3ade576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"], 0x52) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00'}) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6611, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'wlan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r1) [ 2067.559820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2067.560483] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2067.735740] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2067.736592] CPU: 0 UID: 0 PID: 12647 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2067.736613] Tainted: [W]=WARN [ 2067.736617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2067.736625] Call Trace: [ 2067.736630] [ 2067.736635] dump_stack_lvl+0xfa/0x120 [ 2067.736659] dump_header+0x107/0x950 [ 2067.736682] oom_kill_process+0x278/0xa00 [ 2067.736702] out_of_memory+0x34b/0x1690 [ 2067.736724] ? __pfx_out_of_memory+0x10/0x10 [ 2067.736748] mem_cgroup_out_of_memory+0x164/0x190 [ 2067.736768] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2067.736791] ? mark_held_locks+0x49/0x80 [ 2067.736810] try_charge_memcg+0x81f/0xf30 [ 2067.736833] ? __pfx_try_charge_memcg+0x10/0x10 [ 2067.736855] charge_memcg+0x7b/0x290 [ 2067.736871] __mem_cgroup_charge+0x28/0x90 [ 2067.736889] __handle_mm_fault+0x14b5/0x3310 [ 2067.736909] ? __pfx_perf_trace_lock+0x10/0x10 [ 2067.736924] ? __pfx___handle_mm_fault+0x10/0x10 [ 2067.736941] ? __pte_offset_map_lock+0x190/0x330 [ 2067.736963] ? no_page_table+0xc7/0x220 [ 2067.736981] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2067.737003] handle_mm_fault+0x2c3/0x9b0 [ 2067.737024] __get_user_pages+0x58a/0x2f10 [ 2067.737054] ? __pfx___get_user_pages+0x10/0x10 [ 2067.737079] ? lock_is_held_type+0x9e/0x120 [ 2067.737101] populate_vma_page_range+0x282/0x410 [ 2067.737122] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2067.737140] ? __pfx_find_vma_intersection+0x10/0x10 [ 2067.737157] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2067.737172] __mm_populate+0x100/0x3a0 [ 2067.737192] ? __pfx___mm_populate+0x10/0x10 [ 2067.737213] ? up_write+0x195/0x520 [ 2067.737226] ? lock_is_held_type+0x9e/0x120 [ 2067.737243] __do_sys_mlockall+0x50f/0x5c0 [ 2067.737257] do_syscall_64+0xbf/0x360 [ 2067.737275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.737289] RIP: 0033:0x7fcae51b4b19 [ 2067.737299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2067.737312] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2067.737324] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2067.737333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2067.737341] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2067.737348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2067.737356] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2067.737375] [ 2067.755710] memory: usage 307200kB, limit 307200kB, failcnt 626 [ 2067.756180] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2067.756628] Memory cgroup stats for /syz5: [ 2067.812332] anon 35635200 [ 2067.812879] file 277651456 [ 2067.813145] kernel 1286144 [ 2067.813364] kernel_stack 65536 [ 2067.813614] pagetables 253952 [ 2067.813873] sec_pagetables 0 [ 2067.814129] percpu 64 [ 2067.814318] sock 0 [ 2067.814487] vmalloc 0 [ 2067.814673] shmem 269262848 [ 2067.814927] file_mapped 8388608 [ 2067.815197] file_dirty 0 [ 2067.815401] file_writeback 0 [ 2067.815631] swapcached 0 [ 2067.815834] inactive_anon 269303808 [ 2067.816145] active_anon 4096 [ 2067.816377] inactive_file 0 [ 2067.816598] active_file 0 [ 2067.816807] unevictable 43978752 [ 2067.817079] slab_reclaimable 824992 [ 2067.817379] slab_unreclaimable 166832 [ 2067.817671] slab 991824 [ 2067.817886] workingset_refault_anon 0 [ 2067.818289] workingset_refault_file 0 [ 2067.818586] workingset_activate_anon 0 [ 2067.818882] workingset_activate_file 0 [ 2067.819347] workingset_restore_anon 0 [ 2067.819713] workingset_restore_file 0 [ 2067.820029] workingset_nodereclaim 0 [ 2067.820455] pgdemote_kswapd 0 [ 2067.820693] pgdemote_direct 0 [ 2067.820950] pgdemote_khugepaged 0 [ 2067.821229] pgdemote_proactive 0 [ 2067.821509] pgscan 579 [ 2067.821712] pgsteal 9 [ 2067.821911] pswpin 0 [ 2067.822115] pswpout 0 [ 2067.822301] pgscan_kswapd 0 [ 2067.822521] pgscan_direct 579 [ 2067.822757] pgscan_khugepaged 0 [ 2067.823003] pgscan_proactive 0 [ 2067.823266] pgsteal_kswapd 0 [ 2067.823518] pgsteal_direct 9 [ 2067.823750] pgsteal_khugepaged 0 [ 2067.824033] pgsteal_proactive 0 [ 2067.824304] pgfault 476485 [ 2067.824548] pgmajfault 0 [ 2067.824756] pgrefill 18390 [ 2067.825055] pgactivate 48839 [ 2067.825431] pgdeactivate 576 [ 2067.825697] pglazyfree 0 [ 2067.825921] pglazyfreed 0 [ 2067.826178] swpin_zero 0 [ 2067.826402] swpout_zero 0 [ 2067.826634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12643,uid=0 [ 2067.827880] Memory cgroup out of memory: Killed process 12643 (syz-executor.5) total-vm:93420kB, anon-rss:34860kB, file-rss:56416kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 18:55:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)=0x4b) 18:55:47 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:47 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:47 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="04f87395ce40533637e9eb98dee360d98cf5ad4e8b0d5ac3ba1bf8f698cb9bfc8678be327b8de433849f8a718948e5e181fe37598c4f90ea33425508dc103fce3aa43eb04f580ddf835ed53d8633e3a46b390d03109f33a2af40024ccb01eafa1590df8ddf89d41dcf9aa45f0adee600d73211e3df909f47fc0d964ceaf0c4087b8eb4308d7997c3484666100ecc07a876723674e6495833271ef82720d04e812a8161ebb875b61544c7b88673414be874f88e21eafa65af52a4e7b47fd7"], 0xbe) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'bridge_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = getpid() process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/185, 0xb9}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, r3, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r1) 18:55:47 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe000000000000) 18:55:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) 18:55:47 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:47 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2077.193701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2077.194632] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2077.195839] buffer_io_error: 5 callbacks suppressed [ 2077.195853] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2077.197710] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2077.198873] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2077.200021] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2077.201184] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3ff, @none, 0x0, 0x1}, 0xe) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ea7fb8ef3f080635abac1dc4315669827dafd1d26a902dc939845e9e4ad788a30274efc70f5a1946ec2b16e50c3f62e711929de478772ca08916bf438c4c9529a2df5881743e71a27cec8e0f9f87d37fac737cbd9317690e46136d6d90af2373dfbc196158956290cc65b124665f8d41377e92e8776d90536f470c7f6be59c64b8725e", 0x83, 0x80000001}, {&(0x7f0000000180)="a5d7b02e15c2f8c0f32773c16b47dbe6a62024254b059fe00813", 0x1a}], 0x80008, &(0x7f0000000200)={[{@huge_always}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@dont_appraise}]}) dup(r1) 18:55:47 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0xf95ae000) close(r0) 18:55:47 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x10000000000000) [ 2077.531095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2077.532159] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2077.533478] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2077.534753] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2077.536039] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2077.537356] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2077.538684] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 2078.252197] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2078.252993] CPU: 0 UID: 0 PID: 12694 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2078.253013] Tainted: [W]=WARN [ 2078.253017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.253025] Call Trace: [ 2078.253031] [ 2078.253036] dump_stack_lvl+0xfa/0x120 [ 2078.253063] dump_header+0x107/0x950 [ 2078.253088] oom_kill_process+0x278/0xa00 [ 2078.253109] out_of_memory+0x34b/0x1690 [ 2078.253130] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2078.253147] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2078.253164] ? __pfx_out_of_memory+0x10/0x10 [ 2078.253185] ? perf_trace_preemptirq_template+0x259/0x430 [ 2078.253210] mem_cgroup_out_of_memory+0x164/0x190 [ 2078.253231] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2078.253255] ? mark_held_locks+0x49/0x80 [ 2078.253274] try_charge_memcg+0x81f/0xf30 [ 2078.253298] ? __pfx_try_charge_memcg+0x10/0x10 [ 2078.253322] charge_memcg+0x7b/0x290 [ 2078.253338] __mem_cgroup_charge+0x28/0x90 [ 2078.253357] shmem_get_folio_gfp.constprop.0+0x547/0x13a0 [ 2078.253383] ? perf_trace_lock+0xb5/0x5d0 [ 2078.253398] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 2078.253422] ? __lock_acquire+0x694/0x1b70 [ 2078.253438] shmem_fault+0x1f3/0x9f0 [ 2078.253457] ? __pfx_shmem_fault+0x10/0x10 [ 2078.253476] ? __pfx_perf_trace_lock+0x10/0x10 [ 2078.253500] __do_fault+0x10d/0x480 [ 2078.253517] __handle_mm_fault+0x11cc/0x3310 [ 2078.253537] ? __pfx_perf_trace_lock+0x10/0x10 [ 2078.253552] ? __pfx___handle_mm_fault+0x10/0x10 [ 2078.253569] ? __pte_offset_map_lock+0x190/0x330 [ 2078.253592] ? no_page_table+0xc7/0x220 [ 2078.253610] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2078.253634] handle_mm_fault+0x2c3/0x9b0 [ 2078.253664] __get_user_pages+0x58a/0x2f10 [ 2078.253696] ? __pfx___get_user_pages+0x10/0x10 [ 2078.253717] ? lock_is_held_type+0x9e/0x120 [ 2078.253736] populate_vma_page_range+0x282/0x410 [ 2078.253757] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2078.253777] ? __pfx_find_vma_intersection+0x10/0x10 [ 2078.253795] ? do_mmap+0x6a4/0x11d0 [ 2078.253813] __mm_populate+0x100/0x3a0 [ 2078.253833] ? __pfx___mm_populate+0x10/0x10 [ 2078.253855] ? up_write+0x195/0x520 [ 2078.253869] ? lock_is_held_type+0x9e/0x120 [ 2078.253886] do_shmat+0xdd4/0x1310 [ 2078.253906] ? __pfx_do_shmat+0x10/0x10 [ 2078.253920] ? __x64_sys_futex+0x1c9/0x4d0 [ 2078.253934] ? __x64_sys_futex+0x1d2/0x4d0 [ 2078.253951] __x64_sys_shmat+0xcf/0x160 [ 2078.253964] ? xfd_validate_state+0x55/0x180 [ 2078.253984] ? __pfx___x64_sys_shmat+0x10/0x10 [ 2078.254000] ? do_syscall_64+0x85/0x360 [ 2078.254019] do_syscall_64+0xbf/0x360 [ 2078.254037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2078.254051] RIP: 0033:0x7f02f34a2b19 [ 2078.254062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.254075] RSP: 002b:00007f02f0a18188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 2078.254088] RAX: ffffffffffffffda RBX: 00007f02f35b5f60 RCX: 00007f02f34a2b19 [ 2078.254097] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000008055 [ 2078.254106] RBP: 00007f02f34fcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2078.254114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2078.254121] R13: 00007ffe94ec6a2f R14: 00007f02f0a18300 R15: 0000000000022000 [ 2078.254141] [ 2078.280110] memory: usage 307200kB, limit 307200kB, failcnt 20 [ 2078.280603] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2078.281521] Memory cgroup stats for /syz2: [ 2078.309789] anon 37679104 [ 2078.310414] file 275374080 [ 2078.310644] kernel 1519616 [ 2078.310890] kernel_stack 98304 [ 2078.311177] pagetables 266240 [ 2078.311430] sec_pagetables 0 [ 2078.311674] percpu 64 [ 2078.311870] sock 0 [ 2078.312052] vmalloc 0 [ 2078.312269] shmem 266977280 [ 2078.312505] file_mapped 11079680 [ 2078.312776] file_dirty 0 [ 2078.312991] file_writeback 0 [ 2078.313260] swapcached 0 [ 2078.313481] inactive_anon 258224128 [ 2078.313782] active_anon 6115328 [ 2078.314044] inactive_file 4096 [ 2078.314317] active_file 4096 [ 2078.314564] unevictable 48705536 [ 2078.314834] slab_reclaimable 813112 [ 2078.315137] slab_unreclaimable 345184 [ 2078.315437] slab 1158296 [ 2078.315662] workingset_refault_anon 0 [ 2078.315963] workingset_refault_file 1 [ 2078.316281] workingset_activate_anon 0 [ 2078.316591] workingset_activate_file 0 [ 2078.316895] workingset_restore_anon 0 [ 2078.317213] workingset_restore_file 0 [ 2078.317516] workingset_nodereclaim 0 [ 2078.317814] pgdemote_kswapd 0 [ 2078.318081] pgdemote_direct 0 [ 2078.318332] pgdemote_khugepaged 0 [ 2078.318604] pgdemote_proactive 0 [ 2078.318875] pgscan 51 [ 2078.319088] pgsteal 5 [ 2078.319286] pswpin 0 [ 2078.319477] pswpout 0 [ 2078.319682] pgscan_kswapd 0 [ 2078.319915] pgscan_direct 51 [ 2078.320180] pgscan_khugepaged 0 [ 2078.320447] pgscan_proactive 0 [ 2078.320712] pgsteal_kswapd 0 [ 2078.320957] pgsteal_direct 5 [ 2078.321220] pgsteal_khugepaged 0 [ 2078.321493] pgsteal_proactive 0 [ 2078.321766] pgfault 1714685 [ 2078.321998] pgmajfault 0 [ 2078.322232] pgrefill 621 [ 2078.322449] pgactivate 163444 [ 2078.322697] pgdeactivate 52 [ 2078.322929] pglazyfree 0 [ 2078.323162] pglazyfreed 0 [ 2078.323385] swpin_zero 0 [ 2078.323602] swpout_zero 0 [ 2078.323825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12693,uid=0 [ 2078.325008] Memory cgroup out of memory: Killed process 12693 (syz-executor.2) total-vm:105812kB, anon-rss:37036kB, file-rss:56424kB, shmem-rss:2432kB, UID:0 pgtables:244kB oom_score_adj:1000 [ 2078.791402] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2078.792183] CPU: 0 UID: 0 PID: 12725 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2078.792203] Tainted: [W]=WARN [ 2078.792207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.792215] Call Trace: [ 2078.792220] [ 2078.792225] dump_stack_lvl+0xfa/0x120 [ 2078.792249] dump_header+0x107/0x950 [ 2078.792271] oom_kill_process+0x278/0xa00 [ 2078.792291] out_of_memory+0x34b/0x1690 [ 2078.792311] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2078.792328] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2078.792345] ? __pfx_out_of_memory+0x10/0x10 [ 2078.792364] ? perf_trace_preemptirq_template+0x259/0x430 [ 2078.792388] mem_cgroup_out_of_memory+0x164/0x190 [ 2078.792408] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2078.792432] ? mark_held_locks+0x49/0x80 [ 2078.792450] try_charge_memcg+0x81f/0xf30 [ 2078.792473] ? __pfx_try_charge_memcg+0x10/0x10 [ 2078.792496] charge_memcg+0x7b/0x290 [ 2078.792512] __mem_cgroup_charge+0x28/0x90 [ 2078.792530] shmem_get_folio_gfp.constprop.0+0x547/0x13a0 [ 2078.792555] ? perf_trace_lock+0xb5/0x5d0 [ 2078.792569] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 2078.792592] ? __lock_acquire+0x694/0x1b70 [ 2078.792607] shmem_fault+0x1f3/0x9f0 [ 2078.792625] ? __pfx_shmem_fault+0x10/0x10 [ 2078.792644] ? __pfx_perf_trace_lock+0x10/0x10 [ 2078.792667] __do_fault+0x10d/0x480 [ 2078.792684] __handle_mm_fault+0x11cc/0x3310 [ 2078.792704] ? __pfx_perf_trace_lock+0x10/0x10 [ 2078.792718] ? __pfx___handle_mm_fault+0x10/0x10 [ 2078.792735] ? __pte_offset_map_lock+0x190/0x330 [ 2078.792757] ? no_page_table+0xc7/0x220 [ 2078.792774] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2078.792796] handle_mm_fault+0x2c3/0x9b0 [ 2078.792817] __get_user_pages+0x58a/0x2f10 [ 2078.792848] ? __pfx___get_user_pages+0x10/0x10 [ 2078.792868] ? lock_is_held_type+0x9e/0x120 [ 2078.792886] populate_vma_page_range+0x282/0x410 [ 2078.792906] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2078.792925] ? __pfx_find_vma_intersection+0x10/0x10 [ 2078.792942] ? do_mmap+0x6a4/0x11d0 [ 2078.792960] __mm_populate+0x100/0x3a0 [ 2078.792980] ? __pfx___mm_populate+0x10/0x10 [ 2078.793000] ? up_write+0x195/0x520 [ 2078.793014] ? lock_is_held_type+0x9e/0x120 [ 2078.793030] do_shmat+0xdd4/0x1310 [ 2078.793049] ? __pfx_do_shmat+0x10/0x10 [ 2078.793066] ? __x64_sys_futex+0x1c9/0x4d0 [ 2078.793080] ? __x64_sys_futex+0x1d2/0x4d0 [ 2078.793097] __x64_sys_shmat+0xcf/0x160 [ 2078.793111] ? __pfx___x64_sys_shmat+0x10/0x10 [ 2078.793127] ? do_syscall_64+0x85/0x360 [ 2078.793145] do_syscall_64+0xbf/0x360 [ 2078.793162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2078.793176] RIP: 0033:0x7fcae51b4b19 [ 2078.793187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.793199] RSP: 002b:00007fcae2709188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 2078.793211] RAX: ffffffffffffffda RBX: 00007fcae52c8020 RCX: 00007fcae51b4b19 [ 2078.793220] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 000000000000001d [ 2078.793228] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2078.793236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2078.793243] R13: 00007ffd8c770c2f R14: 00007fcae2709300 R15: 0000000000022000 [ 2078.793262] [ 2078.817673] memory: usage 307200kB, limit 307200kB, failcnt 663 [ 2078.818338] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2078.818863] Memory cgroup stats for /syz5: [ 2078.838002] anon 23687168 [ 2078.838658] file 289521664 [ 2078.838885] kernel 1363968 [ 2078.839138] kernel_stack 98304 [ 2078.839398] pagetables 249856 [ 2078.839646] sec_pagetables 0 [ 2078.839888] percpu 64 [ 2078.840105] sock 0 [ 2078.840286] vmalloc 0 [ 2078.840483] shmem 281133056 [ 2078.840714] file_mapped 20258816 [ 2078.840982] file_dirty 0 [ 2078.841215] file_writeback 0 [ 2078.841460] swapcached 0 [ 2078.841684] inactive_anon 269303808 [ 2078.841969] active_anon 4096 [ 2078.842229] inactive_file 0 [ 2078.842466] active_file 0 [ 2078.842691] unevictable 43900928 [ 2078.842961] slab_reclaimable 859224 [ 2078.843265] slab_unreclaimable 180560 [ 2078.843567] slab 1039784 [ 2078.843781] workingset_refault_anon 0 [ 2078.844109] workingset_refault_file 1006 [ 2078.844429] workingset_activate_anon 0 [ 2078.844732] workingset_activate_file 1006 [ 2078.845053] workingset_restore_anon 0 [ 2078.845384] workingset_restore_file 328 [ 2078.845701] workingset_nodereclaim 0 [ 2078.845994] pgdemote_kswapd 0 [ 2078.846287] pgdemote_direct 0 [ 2078.846540] pgdemote_khugepaged 0 [ 2078.846814] pgdemote_proactive 0 [ 2078.847101] pgscan 1585 [ 2078.847311] pgsteal 1015 [ 2078.847525] pswpin 0 [ 2078.847716] pswpout 0 [ 2078.847911] pgscan_kswapd 16 [ 2078.848173] pgscan_direct 1569 [ 2078.848433] pgscan_khugepaged 0 [ 2078.848702] pgscan_proactive 0 [ 2078.848957] pgsteal_kswapd 16 [ 2078.849224] pgsteal_direct 999 [ 2078.849481] pgsteal_khugepaged 0 [ 2078.849760] pgsteal_proactive 0 [ 2078.850020] pgfault 485975 [ 2078.850266] pgmajfault 1 [ 2078.850482] pgrefill 20196 [ 2078.850707] pgactivate 50101 [ 2078.850951] pgdeactivate 1582 [ 2078.851217] pglazyfree 0 [ 2078.851434] pglazyfreed 0 [ 2078.851658] swpin_zero 0 [ 2078.851871] swpout_zero 0 [ 2078.852112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12697,uid=0 [ 2078.853293] Memory cgroup out of memory: Killed process 12697 (syz-executor.5) total-vm:105812kB, anon-rss:23340kB, file-rss:52372kB, shmem-rss:11520kB, UID:0 pgtables:228kB oom_score_adj:1000 18:55:58 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe6ef7f00000000) 18:55:58 executing program 4: write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970008a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3bb2ac6a58ef3ebd2dd9d7f6693308964f99142bc0add5e6763525aded931abfa273898abcc8f7bb0f73a9e37af8641285bbde9cfa055b3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 2088.639308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2088.639804] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2088.640512] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2088.641169] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2088.641813] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2088.642463] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2088.643123] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:55:59 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) 18:55:59 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:59 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:59 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:55:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc8, 0x9}}}, 0x8) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:55:59 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e70408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b64b523aff666392827e2a955fb87690c37745e6b373b3b42df85691b54462ed0b950a09c79afe178281ff900"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0xbca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:59 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe6ff7f00000000) 18:55:59 executing program 4: write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3bf5b2fc3777bfdc16bbb4b44b6cec3ece8fd5b65b26208b248652b674aaf1f37ef97728e3d942bc96f4bd29f2bd263d95ea1cbe360ffa900d818c4481aeaf93b0f9d32b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 2088.987621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2088.988203] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2088.988871] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2088.989549] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2088.990222] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2088.990853] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2088.991506] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 2089.109912] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 18:55:59 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 18:55:59 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000088b5fe36203d25b1a46bd800e584beca243eb8172cd9a0623da9fe52ba2f7b6c5dd6e43866bbee15ae0342e7734acf8fbbce5195c15d9641f64256e732dda361d3d4c38b9c81d539c4fdbd50bf4fd7142db5cd74a8eecf5d28f998a74c5aaf47cac2cc8c63a43679ebf7a69d12b2d2039e474e822470aac5b297e2365b46da23d945823b145059ad1a9969cbd56d520936dd24e06011a9ef5c1c8b382abe3b1e21dfa345998916f90f1c150e8549bde84e67dd0c8af25e3edb3dd6a09f0c"], 0x21) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'geneve0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x20) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) [ 2089.114161] CPU: 1 UID: 0 PID: 12745 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2089.114199] Tainted: [W]=WARN [ 2089.114207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2089.114221] Call Trace: [ 2089.114229] [ 2089.114238] dump_stack_lvl+0xfa/0x120 [ 2089.114276] dump_header+0x107/0x950 [ 2089.114316] oom_kill_process+0x278/0xa00 [ 2089.114352] out_of_memory+0x34b/0x1690 [ 2089.114394] ? __pfx_out_of_memory+0x10/0x10 [ 2089.114439] mem_cgroup_out_of_memory+0x164/0x190 [ 2089.114474] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2089.114518] ? mark_held_locks+0x49/0x80 [ 2089.114550] try_charge_memcg+0x81f/0xf30 [ 2089.114590] ? __pfx_try_charge_memcg+0x10/0x10 [ 2089.114632] charge_memcg+0x7b/0x290 [ 2089.114661] __mem_cgroup_charge+0x28/0x90 [ 2089.114694] __handle_mm_fault+0x14b5/0x3310 [ 2089.114731] ? __pfx_perf_trace_lock+0x10/0x10 [ 2089.114757] ? __pfx___handle_mm_fault+0x10/0x10 [ 2089.114789] ? __pte_offset_map_lock+0x190/0x330 [ 2089.114829] ? no_page_table+0xc7/0x220 [ 2089.114860] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2089.114901] handle_mm_fault+0x2c3/0x9b0 [ 2089.114940] __get_user_pages+0x58a/0x2f10 [ 2089.114990] ? mlock_drain_local+0x25/0x3e0 [ 2089.115016] ? __pfx___get_user_pages+0x10/0x10 [ 2089.115054] ? lock_is_held_type+0x9e/0x120 [ 2089.115092] populate_vma_page_range+0x282/0x410 [ 2089.115130] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2089.115164] ? __pfx_find_vma_intersection+0x10/0x10 [ 2089.115193] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2089.115223] __mm_populate+0x100/0x3a0 [ 2089.115259] ? __pfx___mm_populate+0x10/0x10 [ 2089.115298] ? up_write+0x195/0x520 [ 2089.115322] ? lock_is_held_type+0x9e/0x120 [ 2089.115353] __do_sys_mlockall+0x50f/0x5c0 [ 2089.115379] do_syscall_64+0xbf/0x360 [ 2089.115412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.115436] RIP: 0033:0x7fcae51b4b19 [ 2089.115454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2089.115476] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2089.115499] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2089.115515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2089.115529] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2089.115543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2089.115557] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2089.115593] [ 2089.151612] memory: usage 307200kB, limit 307200kB, failcnt 688 [ 2089.152549] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2089.153465] Memory cgroup stats for /syz5: [ 2089.164850] anon 23748608 [ 2089.165949] file 289525760 [ 2089.166408] kernel 1298432 [ 2089.166825] kernel_stack 65536 [ 2089.167336] pagetables 229376 [ 2089.167796] sec_pagetables 0 [ 2089.168277] percpu 64 [ 2089.168640] sock 0 [ 2089.168967] vmalloc 0 [ 2089.169367] shmem 281137152 [ 2089.169808] file_mapped 8388608 [ 2089.170326] file_dirty 0 [ 2089.170723] file_writeback 0 [ 2089.171207] swapcached 0 [ 2089.171602] inactive_anon 281161728 [ 2089.172160] active_anon 4096 [ 2089.172607] inactive_file 0 [ 2089.173038] active_file 0 [ 2089.173484] unevictable 32108544 [ 2089.173986] slab_reclaimable 858840 [ 2089.174545] slab_unreclaimable 170872 [ 2089.175125] slab 1029712 [ 2089.175522] workingset_refault_anon 0 [ 2089.176119] workingset_refault_file 1006 [ 2089.176702] workingset_activate_anon 0 [ 2089.177287] workingset_activate_file 1006 [ 2089.177893] workingset_restore_anon 0 [ 2089.178474] workingset_restore_file 328 [ 2089.179047] workingset_nodereclaim 0 [ 2089.179615] pgdemote_kswapd 0 [ 2089.180114] pgdemote_direct 0 [ 2089.180574] pgdemote_khugepaged 0 [ 2089.181112] pgdemote_proactive 0 [ 2089.181607] pgscan 1585 [ 2089.182008] pgsteal 1015 [ 2089.182439] pswpin 0 [ 2089.182798] pswpout 0 [ 2089.183350] pgscan_kswapd 16 [ 2089.183804] pgscan_direct 1569 [ 2089.184316] pgscan_khugepaged 0 [ 2089.184806] pgscan_proactive 0 [ 2089.185329] pgsteal_kswapd 16 [ 2089.185801] pgsteal_direct 999 [ 2089.186301] pgsteal_khugepaged 0 [ 2089.186805] pgsteal_proactive 0 [ 2089.187324] pgfault 492050 [ 2089.187745] pgmajfault 1 [ 2089.188177] pgrefill 21104 [ 2089.188602] pgactivate 51574 [ 2089.189050] pgdeactivate 1582 [ 2089.189541] pglazyfree 0 [ 2089.189945] pglazyfreed 0 [ 2089.190389] swpin_zero 0 [ 2089.190787] swpout_zero 0 [ 2089.191225] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12743,uid=0 [ 2089.193349] Memory cgroup out of memory: Killed process 12743 (syz-executor.5) total-vm:93420kB, anon-rss:23340kB, file-rss:51908kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 18:55:59 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xf0ff7f00000000) [ 2089.268818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2089.269350] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 18:55:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x1, 0x5, 0x4, 0x8, 0x2, 0x6}, 0xc) 18:55:59 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x401, 0x5}}, './file0\x00'}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:55:59 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2089.806302] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2089.807218] CPU: 0 UID: 0 PID: 12754 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2089.807239] Tainted: [W]=WARN [ 2089.807243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2089.807250] Call Trace: [ 2089.807256] [ 2089.807261] dump_stack_lvl+0xfa/0x120 [ 2089.807284] dump_header+0x107/0x950 [ 2089.807307] oom_kill_process+0x278/0xa00 [ 2089.807327] out_of_memory+0x34b/0x1690 [ 2089.807347] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2089.807364] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2089.807380] ? __pfx_out_of_memory+0x10/0x10 [ 2089.807400] ? perf_trace_preemptirq_template+0x259/0x430 [ 2089.807423] mem_cgroup_out_of_memory+0x164/0x190 [ 2089.807444] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2089.807467] ? mark_held_locks+0x49/0x80 [ 2089.807486] try_charge_memcg+0x81f/0xf30 [ 2089.807509] ? __pfx_try_charge_memcg+0x10/0x10 [ 2089.807531] charge_memcg+0x7b/0x290 [ 2089.807547] __mem_cgroup_charge+0x28/0x90 [ 2089.807565] shmem_get_folio_gfp.constprop.0+0x547/0x13a0 [ 2089.807589] ? perf_trace_lock+0xb5/0x5d0 [ 2089.807604] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 2089.807626] ? __lock_acquire+0x694/0x1b70 [ 2089.807642] shmem_fault+0x1f3/0x9f0 [ 2089.807660] ? __pfx_shmem_fault+0x10/0x10 [ 2089.807678] ? __pfx_perf_trace_lock+0x10/0x10 [ 2089.807701] __do_fault+0x10d/0x480 [ 2089.807718] __handle_mm_fault+0x11cc/0x3310 [ 2089.807737] ? __pfx_perf_trace_lock+0x10/0x10 [ 2089.807751] ? __pfx___handle_mm_fault+0x10/0x10 [ 2089.807767] ? __pte_offset_map_lock+0x190/0x330 [ 2089.807792] ? no_page_table+0xc7/0x220 [ 2089.807810] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2089.807832] handle_mm_fault+0x2c3/0x9b0 [ 2089.807853] __get_user_pages+0x58a/0x2f10 [ 2089.807884] ? __pfx___get_user_pages+0x10/0x10 [ 2089.807904] ? lock_is_held_type+0x9e/0x120 [ 2089.807922] populate_vma_page_range+0x282/0x410 [ 2089.807943] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2089.807961] ? __pfx_find_vma_intersection+0x10/0x10 [ 2089.807978] ? do_mmap+0x6a4/0x11d0 [ 2089.807995] __mm_populate+0x100/0x3a0 [ 2089.808015] ? __pfx___mm_populate+0x10/0x10 [ 2089.808036] ? up_write+0x195/0x520 [ 2089.808049] ? lock_is_held_type+0x9e/0x120 [ 2089.808069] do_shmat+0xdd4/0x1310 [ 2089.808088] ? __pfx_do_shmat+0x10/0x10 [ 2089.808102] ? __x64_sys_futex+0x1c9/0x4d0 [ 2089.808115] ? __x64_sys_futex+0x1d2/0x4d0 [ 2089.808131] __x64_sys_shmat+0xcf/0x160 [ 2089.808143] ? xfd_validate_state+0x55/0x180 [ 2089.808162] ? __pfx___x64_sys_shmat+0x10/0x10 [ 2089.808177] ? do_syscall_64+0x85/0x360 [ 2089.808195] do_syscall_64+0xbf/0x360 [ 2089.808213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.808226] RIP: 0033:0x7f02f34a2b19 [ 2089.808237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2089.808249] RSP: 002b:00007f02f09f7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 2089.808262] RAX: ffffffffffffffda RBX: 00007f02f35b6020 RCX: 00007f02f34a2b19 [ 2089.808270] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000008056 [ 2089.808278] RBP: 00007f02f34fcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2089.808285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2089.808293] R13: 00007ffe94ec6a2f R14: 00007f02f09f7300 R15: 0000000000022000 [ 2089.808312] [ 2089.833846] memory: usage 307200kB, limit 307200kB, failcnt 39 [ 2089.834843] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2089.835369] Memory cgroup stats for /syz2: [ 2090.038440] anon 25784320 [ 2090.040360] file 287236096 [ 2090.040950] kernel 1552384 [ 2090.041547] kernel_stack 98304 [ 2090.042035] pagetables 258048 [ 2090.042533] sec_pagetables 0 [ 2090.042985] percpu 64 [ 2090.043392] sock 0 [ 2090.043722] vmalloc 0 [ 2090.044118] shmem 278839296 [ 2090.044562] file_mapped 20246528 [ 2090.045055] file_dirty 0 [ 2090.045494] file_writeback 0 [ 2090.045953] swapcached 0 [ 2090.046385] inactive_anon 260911104 [ 2090.047304] active_anon 6115328 [ 2090.047795] inactive_file 0 [ 2090.048605] active_file 8192 [ 2090.049381] unevictable 45985792 [ 2090.050050] slab_reclaimable 846960 [ 2090.050778] slab_unreclaimable 349224 [ 2090.051555] slab 1196184 [ 2090.052012] workingset_refault_anon 0 [ 2090.052727] workingset_refault_file 715 [ 2090.053510] workingset_activate_anon 0 [ 2090.054259] workingset_activate_file 714 [ 2090.054844] workingset_restore_anon 0 [ 2090.055588] workingset_restore_file 0 [ 2090.056341] workingset_nodereclaim 0 [ 2090.057099] pgdemote_kswapd 0 [ 2090.057703] pgdemote_direct 0 [ 2090.058368] pgdemote_khugepaged 0 [ 2090.058961] pgdemote_proactive 0 [ 2090.059637] pgscan 823 [ 2090.060123] pgsteal 719 [ 2090.060600] pswpin 0 [ 2090.061117] pswpout 0 [ 2090.061551] pgscan_kswapd 5 [ 2090.062126] pgscan_direct 818 [ 2090.062717] pgscan_khugepaged 0 [ 2090.063369] pgscan_proactive 0 [ 2090.063903] pgsteal_kswapd 0 [ 2090.064456] pgsteal_direct 719 [ 2090.065053] pgsteal_khugepaged 0 [ 2090.065719] pgsteal_proactive 0 [ 2090.066268] pgfault 1724170 [ 2090.066788] pgmajfault 1 [ 2090.067332] pgrefill 2279 [ 2090.067795] pgactivate 164954 [ 2090.068424] pgdeactivate 822 [ 2090.068968] pglazyfree 0 [ 2090.069465] pglazyfreed 0 [ 2090.070033] swpin_zero 0 [ 2090.070560] swpout_zero 0 [ 2090.071048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12734,uid=0 [ 2090.073588] Memory cgroup out of memory: Killed process 12734 (syz-executor.2) total-vm:105812kB, anon-rss:25388kB, file-rss:52456kB, shmem-rss:11520kB, UID:0 pgtables:236kB oom_score_adj:1000 18:56:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) 18:56:09 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xf0ffffff7f0000) 18:56:09 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:09 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe6ff7f00000000) 18:56:09 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035830c4690bca329e3b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:56:09 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:09 executing program 6: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xe6ff7f00000000) 18:56:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2}, 0xe) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) pwrite64(r0, &(0x7f0000000040)="72b5f8227045c9cc9aac8fcb45bdfb8561653012b00c88975507fb805c5fbaa855c67f08e68cfea955e770deaeadf731cba4ab2922c33dd641", 0x39, 0xf1) 18:56:09 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2099.587099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2099.587592] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2099.588535] buffer_io_error: 5 callbacks suppressed [ 2099.588544] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2099.589677] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2099.590415] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2099.591128] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2099.591852] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 2099.611876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2099.612705] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2099.613724] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2099.614734] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2099.615678] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2099.616542] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2099.617543] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:56:10 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x4, {{0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e20, 0x0, @empty, 0x17b}}}, 0x108) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5, 0x8}}, './file0\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000180)={0x7, {{0xa, 0x4e21, 0x0, @local, 0x7}}, {{0xa, 0x4e23, 0x3d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}}}, 0x108) getsockopt$bt_BT_POWER(r0, 0x112, 0xd, 0x0, &(0x7f0000004640)) socket$inet6_udp(0xa, 0x2, 0x0) 18:56:10 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0xfeff3f00000000) [ 2099.698854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2099.699604] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 18:56:10 executing program 6: write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3bf5b2fc3777bfdc16bbb4b44b6cec3ece8fd5b65b26208b248652b674aaf1f37ef97728e3d942bc96f4bd29f2bd263d95ea1cbe360ffa900d818c4481aeaf93b0f9d32b"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:56:10 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x100000000000000) 18:56:10 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2099.958553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2099.959757] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 18:56:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) 18:56:10 executing program 1: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x6611, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@remote, @local]}) close(r0) [ 2100.093286] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2100.094923] CPU: 0 UID: 0 PID: 12787 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2100.094944] Tainted: [W]=WARN [ 2100.094948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2100.094956] Call Trace: [ 2100.094961] [ 2100.094966] dump_stack_lvl+0xfa/0x120 [ 2100.094989] dump_header+0x107/0x950 [ 2100.095011] oom_kill_process+0x278/0xa00 [ 2100.095030] out_of_memory+0x34b/0x1690 [ 2100.095052] ? __pfx_out_of_memory+0x10/0x10 [ 2100.095078] mem_cgroup_out_of_memory+0x164/0x190 [ 2100.095098] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2100.095125] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2100.095143] try_charge_memcg+0x81f/0xf30 [ 2100.095165] ? __pfx_try_charge_memcg+0x10/0x10 [ 2100.095182] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 2100.095198] obj_cgroup_charge_account+0xa8/0x6e0 [ 2100.095213] ? __create_object+0x59/0x80 [ 2100.095230] __memcg_slab_post_alloc_hook+0x33c/0x9d0 [ 2100.095249] ? __create_object+0x59/0x80 [ 2100.095264] kmem_cache_alloc_node_noprof+0x333/0x3e0 [ 2100.095282] ? copy_process+0x461/0x73c0 [ 2100.095299] copy_process+0x461/0x73c0 [ 2100.095319] ? __pfx_copy_process+0x10/0x10 [ 2100.095335] ? do_try_to_free_pages+0x1275/0x1770 [ 2100.095359] kernel_clone+0xea/0x7f0 [ 2100.095373] ? __pfx_kernel_clone+0x10/0x10 [ 2100.095385] ? set_task_reclaim_state+0x53/0xb0 [ 2100.095400] ? try_to_free_mem_cgroup_pages+0x3a1/0x710 [ 2100.095419] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 2100.095437] ? do_raw_spin_lock+0x123/0x260 [ 2100.095459] __do_sys_clone+0xce/0x120 [ 2100.095470] ? __pfx___do_sys_clone+0x10/0x10 [ 2100.095483] ? __pfx_perf_trace_lock+0x10/0x10 [ 2100.095505] ? xfd_validate_state+0x55/0x180 [ 2100.095530] do_syscall_64+0xbf/0x360 [ 2100.095547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2100.095560] RIP: 0033:0x7f02f34a3f41 [ 2100.095570] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2100.095582] RSP: 002b:00007ffe94ec6978 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2100.095594] RAX: ffffffffffffffda RBX: 00007f02f09f7700 RCX: 00007f02f34a3f41 [ 2100.095603] RDX: 00007f02f09f79d0 RSI: 00007f02f09f72f0 RDI: 00000000003d0f00 [ 2100.095610] RBP: 00007ffe94ec6bb0 R08: 00007f02f09f7700 R09: 00007f02f09f7700 [ 2100.095618] R10: 00007f02f09f79d0 R11: 0000000000000206 R12: 00007ffe94ec6a2e [ 2100.095625] R13: 00007ffe94ec6a2f R14: 00007f02f09f7300 R15: 0000000000022000 [ 2100.095644] [ 2100.114869] memory: usage 307200kB, limit 307200kB, failcnt 83 [ 2100.115432] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.115985] Memory cgroup stats for /syz2: [ 2100.200364] anon 25808896 [ 2100.201562] file 287277056 [ 2100.202046] kernel 1486848 [ 2100.202541] kernel_stack 65536 [ 2100.203191] pagetables 233472 [ 2100.203684] sec_pagetables 0 [ 2100.204202] percpu 64 [ 2100.204580] sock 0 [ 2100.204940] vmalloc 0 [ 2100.205354] shmem 278843392 [ 2100.205824] file_mapped 8429568 [ 2100.206383] file_dirty 0 [ 2100.206852] file_writeback 0 [ 2100.207357] swapcached 0 [ 2100.207796] inactive_anon 272773120 [ 2100.208380] active_anon 6115328 [ 2100.208908] inactive_file 0 [ 2100.209392] active_file 4096 [ 2100.209888] unevictable 34193408 [ 2100.210464] slab_reclaimable 846336 [ 2100.211046] slab_unreclaimable 341792 [ 2100.211693] slab 1188128 [ 2100.212155] workingset_refault_anon 0 [ 2100.212759] workingset_refault_file 740 [ 2100.213403] workingset_activate_anon 0 [ 2100.214019] workingset_activate_file 731 [ 2100.214672] workingset_restore_anon 0 [ 2100.215313] workingset_restore_file 2 [ 2100.215909] workingset_nodereclaim 0 [ 2100.216510] pgdemote_kswapd 0 [ 2100.217016] pgdemote_direct 0 [ 2100.217544] pgdemote_khugepaged 0 [ 2100.218150] pgdemote_proactive 0 [ 2100.218700] pgscan 1096 [ 2100.219168] pgsteal 735 [ 2100.219578] pswpin 0 [ 2100.219973] pswpout 0 [ 2100.220387] pgscan_kswapd 26 [ 2100.220882] pgscan_direct 1070 [ 2100.221421] pgscan_khugepaged 0 [ 2100.221970] pgscan_proactive 0 [ 2100.222507] pgsteal_kswapd 0 [ 2100.223006] pgsteal_direct 735 [ 2100.223534] pgsteal_khugepaged 0 [ 2100.224100] pgsteal_proactive 0 [ 2100.224611] pgfault 1730759 [ 2100.225125] pgmajfault 4 [ 2100.225550] pgrefill 3204 [ 2100.226019] pgactivate 166459 [ 2100.226537] pgdeactivate 883 [ 2100.227045] pglazyfree 0 [ 2100.227507] pglazyfreed 0 [ 2100.227964] swpin_zero 0 [ 2100.228417] swpout_zero 0 [ 2100.228868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12787,uid=0 [ 2100.232226] Memory cgroup out of memory: Killed process 12787 (syz-executor.2) total-vm:93552kB, anon-rss:25388kB, file-rss:52456kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 2100.349680] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2100.350578] CPU: 0 UID: 0 PID: 12824 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2100.350599] Tainted: [W]=WARN [ 2100.350603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2100.350612] Call Trace: [ 2100.350617] [ 2100.350622] dump_stack_lvl+0xfa/0x120 [ 2100.350650] dump_header+0x107/0x950 [ 2100.350678] oom_kill_process+0x278/0xa00 [ 2100.350698] out_of_memory+0x34b/0x1690 [ 2100.350718] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2100.350738] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2100.350754] ? __pfx_out_of_memory+0x10/0x10 [ 2100.350774] ? perf_trace_preemptirq_template+0x259/0x430 [ 2100.350803] mem_cgroup_out_of_memory+0x164/0x190 [ 2100.350823] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2100.350847] ? mark_held_locks+0x49/0x80 [ 2100.350865] try_charge_memcg+0x81f/0xf30 [ 2100.350888] ? __pfx_try_charge_memcg+0x10/0x10 [ 2100.350910] charge_memcg+0x7b/0x290 [ 2100.350926] __mem_cgroup_charge+0x28/0x90 [ 2100.350944] shmem_get_folio_gfp.constprop.0+0x547/0x13a0 [ 2100.350969] ? perf_trace_lock+0xb5/0x5d0 [ 2100.350983] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 2100.351006] ? __lock_acquire+0x694/0x1b70 [ 2100.351021] shmem_fault+0x1f3/0x9f0 [ 2100.351039] ? __pfx_shmem_fault+0x10/0x10 [ 2100.351057] ? __pfx_perf_trace_lock+0x10/0x10 [ 2100.351080] __do_fault+0x10d/0x480 [ 2100.351096] __handle_mm_fault+0x11cc/0x3310 [ 2100.351116] ? __pfx_perf_trace_lock+0x10/0x10 [ 2100.351130] ? __pfx___handle_mm_fault+0x10/0x10 [ 2100.351146] ? __pte_offset_map_lock+0x190/0x330 [ 2100.351168] ? no_page_table+0xc7/0x220 [ 2100.351185] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2100.351208] handle_mm_fault+0x2c3/0x9b0 [ 2100.351229] __get_user_pages+0x58a/0x2f10 [ 2100.351259] ? __pfx___get_user_pages+0x10/0x10 [ 2100.351280] ? lock_is_held_type+0x9e/0x120 [ 2100.351298] populate_vma_page_range+0x282/0x410 [ 2100.351318] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2100.351337] ? __pfx_find_vma_intersection+0x10/0x10 [ 2100.351354] ? do_mmap+0x6a4/0x11d0 [ 2100.351371] __mm_populate+0x100/0x3a0 [ 2100.351391] ? __pfx___mm_populate+0x10/0x10 [ 2100.351412] ? up_write+0x195/0x520 [ 2100.351425] ? lock_is_held_type+0x9e/0x120 [ 2100.351442] do_shmat+0xdd4/0x1310 [ 2100.351461] ? __pfx_do_shmat+0x10/0x10 [ 2100.351483] __x64_sys_shmat+0xcf/0x160 [ 2100.351495] ? xfd_validate_state+0x55/0x180 [ 2100.351514] ? __pfx___x64_sys_shmat+0x10/0x10 [ 2100.351530] ? do_syscall_64+0x85/0x360 [ 2100.351548] do_syscall_64+0xbf/0x360 [ 2100.351566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2100.351579] RIP: 0033:0x7fcae51b4b19 [ 2100.351589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2100.351601] RSP: 002b:00007fcae2709188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 2100.351614] RAX: ffffffffffffffda RBX: 00007fcae52c8020 RCX: 00007fcae51b4b19 [ 2100.351623] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 000000000000001f [ 2100.351631] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2100.351639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2100.351646] R13: 00007ffd8c770c2f R14: 00007fcae2709300 R15: 0000000000022000 [ 2100.351665] [ 2100.377263] memory: usage 307200kB, limit 307200kB, failcnt 743 [ 2100.377762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.378756] Memory cgroup stats for /syz5: [ 2100.391524] anon 14925824 [ 2100.392143] file 298283008 [ 2100.392384] kernel 1363968 [ 2100.392633] kernel_stack 98304 [ 2100.392918] pagetables 192512 [ 2100.393359] sec_pagetables 0 [ 2100.393617] percpu 64 [ 2100.393820] sock 0 [ 2100.394010] vmalloc 0 [ 2100.394248] shmem 298283008 [ 2100.394498] file_mapped 4562944 [ 2100.394778] file_dirty 0 [ 2100.395009] file_writeback 0 [ 2100.395284] swapcached 0 [ 2100.395522] inactive_anon 293736448 [ 2100.395865] active_anon 4096 [ 2100.396187] inactive_file 0 [ 2100.396466] active_file 0 [ 2100.396716] unevictable 19468288 [ 2100.397017] slab_reclaimable 908408 [ 2100.397406] slab_unreclaimable 188640 [ 2100.397823] slab 1097048 [ 2100.398082] workingset_refault_anon 0 [ 2100.398384] workingset_refault_file 7753 [ 2100.398705] workingset_activate_anon 0 [ 2100.399018] workingset_activate_file 6165 [ 2100.399382] workingset_restore_anon 0 [ 2100.399693] workingset_restore_file 4565 [ 2100.400022] workingset_nodereclaim 0 [ 2100.400340] pgdemote_kswapd 0 [ 2100.400593] pgdemote_direct 0 [ 2100.400858] pgdemote_khugepaged 0 [ 2100.401164] pgdemote_proactive 0 [ 2100.401434] pgscan 10474 [ 2100.401648] pgsteal 9810 [ 2100.401866] pswpin 0 [ 2100.402166] pswpout 0 [ 2100.402368] pgscan_kswapd 116 [ 2100.402618] pgscan_direct 10358 [ 2100.402877] pgscan_khugepaged 0 [ 2100.403185] pgscan_proactive 0 [ 2100.403597] pgsteal_kswapd 116 [ 2100.403856] pgsteal_direct 9694 [ 2100.404146] pgsteal_khugepaged 0 [ 2100.404418] pgsteal_proactive 0 [ 2100.404682] pgfault 504657 [ 2100.404911] pgmajfault 6 [ 2100.405149] pgrefill 26261 [ 2100.405380] pgactivate 51574 [ 2100.405633] pgdeactivate 6739 [ 2100.405943] pglazyfree 0 [ 2100.406224] pglazyfreed 0 [ 2100.406492] swpin_zero 0 [ 2100.406747] swpout_zero 0 [ 2100.407008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12795,uid=0 [ 2100.408437] Memory cgroup out of memory: Killed process 12795 (syz-executor.5) total-vm:105812kB, anon-rss:14876kB, file-rss:35592kB, shmem-rss:4352kB, UID:0 pgtables:172kB oom_score_adj:1000 18:56:11 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:11 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:23 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:23 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:23 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:23 executing program 5: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x200000000000000) 18:56:23 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @llc={@snap={0x0, 0x0, "1e", "74408d", 0x0, "a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b"}}}, 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000010c0)={0x0, 0x5, 0x0, [0x80000000, 0x1, 0x80000001, 0x8, 0x2], [0x5, 0x0, 0x400, 0x7f, 0x0, 0xff00000000000000, 0xfffffffffffffff7, 0xffffffffffffff1f, 0x6, 0x3f, 0x1, 0x6, 0x7ff, 0x5, 0x10001, 0x400, 0x9, 0x7, 0xfffffffffffeffff, 0x800, 0x0, 0x401, 0x1, 0xfffffffffffffff8, 0x4, 0x1f, 0xfffffffffffffffa, 0x6, 0x8, 0x7, 0x0, 0x10001, 0x7e, 0x8001, 0x0, 0x5, 0x3, 0x401, 0x9, 0x0, 0x8000, 0xd78, 0xfffffffffffff8f7, 0x8, 0x8, 0x0, 0x3ff, 0x1, 0x8000, 0x81, 0x6, 0x86, 0x5, 0x3, 0x4, 0x8, 0x4c44, 0x1, 0x101, 0x39c, 0x2ceb, 0x6, 0x0, 0x8, 0xfff, 0x8, 0x6, 0x6, 0x7fff, 0x1876, 0x3, 0x100000001, 0xffff, 0x3ff, 0x2, 0x9, 0x7, 0x955, 0x3f1110d7, 0xde, 0x7f, 0x4, 0x5, 0x4, 0x1f, 0x7, 0xd2bf, 0x100, 0x4, 0x400, 0x8, 0x20, 0x8, 0x1f, 0x0, 0x100000000, 0x8, 0xb35, 0x20, 0xe5e4, 0xdf, 0x7, 0x5, 0x1, 0x2, 0xffffffffffffffe0, 0x20000, 0x3, 0x6, 0x23ac, 0x3f, 0xffffffffffffffc0, 0xfe, 0x6, 0x80, 0x7, 0x3, 0x6b46, 0x2, 0x9, 0x4]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1947}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r0) 18:56:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) 18:56:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) [ 2114.517160] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2114.518587] CPU: 1 UID: 0 PID: 12849 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2114.518623] Tainted: [W]=WARN [ 2114.518631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2114.518645] Call Trace: [ 2114.518654] [ 2114.518664] dump_stack_lvl+0xfa/0x120 [ 2114.518700] dump_header+0x107/0x950 [ 2114.518740] oom_kill_process+0x278/0xa00 [ 2114.518777] out_of_memory+0x34b/0x1690 [ 2114.518820] ? __pfx_out_of_memory+0x10/0x10 [ 2114.518864] mem_cgroup_out_of_memory+0x164/0x190 [ 2114.518900] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2114.518945] ? mark_held_locks+0x49/0x80 [ 2114.518977] try_charge_memcg+0x81f/0xf30 [ 2114.519017] ? __pfx_try_charge_memcg+0x10/0x10 [ 2114.519065] charge_memcg+0x7b/0x290 [ 2114.519094] __mem_cgroup_charge+0x28/0x90 [ 2114.519128] __handle_mm_fault+0x14b5/0x3310 [ 2114.519164] ? __pfx_perf_trace_lock+0x10/0x10 [ 2114.519191] ? __pfx___handle_mm_fault+0x10/0x10 [ 2114.519222] ? __pte_offset_map_lock+0x190/0x330 [ 2114.519263] ? no_page_table+0xc7/0x220 [ 2114.519293] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2114.519335] handle_mm_fault+0x2c3/0x9b0 [ 2114.519374] __get_user_pages+0x58a/0x2f10 [ 2114.519431] ? __pfx___get_user_pages+0x10/0x10 [ 2114.519469] ? lock_is_held_type+0x9e/0x120 [ 2114.519501] populate_vma_page_range+0x282/0x410 [ 2114.519540] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2114.519574] ? __pfx_find_vma_intersection+0x10/0x10 [ 2114.519603] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2114.519633] __mm_populate+0x100/0x3a0 [ 2114.519670] ? __pfx___mm_populate+0x10/0x10 [ 2114.519709] ? up_write+0x195/0x520 [ 2114.519734] ? lock_is_held_type+0x9e/0x120 [ 2114.519765] __do_sys_mlockall+0x50f/0x5c0 [ 2114.519791] do_syscall_64+0xbf/0x360 [ 2114.519824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.519848] RIP: 0033:0x7fcae51b4b19 [ 2114.519867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2114.519890] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2114.519912] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2114.519928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2114.519942] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2114.519955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2114.519969] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2114.520005] [ 2114.553568] memory: usage 307200kB, limit 307200kB, failcnt 769 [ 2114.554475] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2114.555370] Memory cgroup stats for /syz5: [ 2114.579247] anon 14970880 [ 2114.580286] file 298287104 [ 2114.580701] kernel 1314816 [ 2114.581145] kernel_stack 65536 [ 2114.581613] pagetables 184320 [ 2114.582106] sec_pagetables 0 [ 2114.582552] percpu 64 [ 2114.582911] sock 0 [ 2114.583267] vmalloc 0 [ 2114.583630] shmem 298287104 [ 2114.584050] file_mapped 0 [ 2114.584483] file_dirty 0 [ 2114.584878] file_writeback 0 [ 2114.585351] swapcached 0 [ 2114.585744] inactive_anon 298303488 [ 2114.586303] active_anon 4096 [ 2114.586749] inactive_file 0 [ 2114.587200] active_file 0 [ 2114.587603] unevictable 14950400 [ 2114.588122] slab_reclaimable 908024 [ 2114.588644] slab_unreclaimable 178952 [ 2114.589215] slab 1086976 [ 2114.589609] workingset_refault_anon 0 [ 2114.590186] workingset_refault_file 7753 [ 2114.590770] workingset_activate_anon 0 [ 2114.591354] workingset_activate_file 6165 [ 2114.591942] workingset_restore_anon 0 [ 2114.592512] workingset_restore_file 4565 [ 2114.593112] workingset_nodereclaim 0 [ 2114.593647] pgdemote_kswapd 0 [ 2114.594140] pgdemote_direct 0 [ 2114.594605] pgdemote_khugepaged 0 [ 2114.595131] pgdemote_proactive 0 [ 2114.595622] pgscan 10474 [ 2114.596014] pgsteal 9810 [ 2114.596431] pswpin 0 [ 2114.596778] pswpout 0 [ 2114.597168] pgscan_kswapd 116 [ 2114.597623] pgscan_direct 10358 [ 2114.598135] pgscan_khugepaged 0 [ 2114.598611] pgscan_proactive 0 [ 2114.599102] pgsteal_kswapd 116 [ 2114.599568] pgsteal_direct 9694 [ 2114.600047] pgsteal_khugepaged 0 [ 2114.600559] pgsteal_proactive 0 [ 2114.601036] pgfault 508335 [ 2114.601477] pgmajfault 6 [ 2114.601867] pgrefill 26261 [ 2114.602319] pgactivate 51574 [ 2114.602762] pgdeactivate 6739 [ 2114.603244] pglazyfree 0 [ 2114.603635] pglazyfreed 0 [ 2114.604044] swpin_zero 0 [ 2114.604466] swpout_zero 0 [ 2114.604869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12847,uid=0 [ 2114.606988] Memory cgroup out of memory: Killed process 12847 (syz-executor.5) total-vm:93420kB, anon-rss:14764kB, file-rss:35648kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 2116.334152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2116.334840] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2116.335744] buffer_io_error: 10 callbacks suppressed [ 2116.335753] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2116.336867] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2116.337516] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2116.338169] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2116.338792] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 2116.606494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2116.606980] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2116.607682] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2116.608443] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2116.609258] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2116.610027] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2116.610826] Buffer I/O error on dev sr0, logical block 4, lost async page write 18:56:26 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) 18:56:26 executing program 5: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:26 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x500000000000000) 18:56:26 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) 18:56:26 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mbind(&(0x7f0000872000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) 18:56:30 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2120.281601] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2120.282610] CPU: 1 UID: 0 PID: 12885 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2120.282631] Tainted: [W]=WARN [ 2120.282635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.282642] Call Trace: [ 2120.282648] [ 2120.282653] dump_stack_lvl+0xfa/0x120 [ 2120.282677] dump_header+0x107/0x950 [ 2120.282700] oom_kill_process+0x278/0xa00 [ 2120.282720] out_of_memory+0x34b/0x1690 [ 2120.282744] ? __pfx_out_of_memory+0x10/0x10 [ 2120.282767] mem_cgroup_out_of_memory+0x164/0x190 [ 2120.282788] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2120.282811] ? mark_held_locks+0x49/0x80 [ 2120.282830] try_charge_memcg+0x81f/0xf30 [ 2120.282853] ? __pfx_try_charge_memcg+0x10/0x10 [ 2120.282875] charge_memcg+0x7b/0x290 [ 2120.282891] __mem_cgroup_charge+0x28/0x90 [ 2120.282909] shmem_get_folio_gfp.constprop.0+0x547/0x13a0 [ 2120.282934] ? perf_trace_lock+0xb5/0x5d0 [ 2120.282948] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 2120.282971] ? __lock_acquire+0x694/0x1b70 [ 2120.282987] shmem_fault+0x1f3/0x9f0 [ 2120.283005] ? __pfx_shmem_fault+0x10/0x10 [ 2120.283023] ? __pfx_perf_trace_lock+0x10/0x10 [ 2120.283046] __do_fault+0x10d/0x480 [ 2120.283067] __handle_mm_fault+0x11cc/0x3310 [ 2120.283087] ? __pfx_perf_trace_lock+0x10/0x10 [ 2120.283101] ? __pfx___handle_mm_fault+0x10/0x10 [ 2120.283118] ? __pte_offset_map_lock+0x190/0x330 [ 2120.283140] ? no_page_table+0xc7/0x220 [ 2120.283157] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2120.283179] handle_mm_fault+0x2c3/0x9b0 [ 2120.283200] __get_user_pages+0x58a/0x2f10 [ 2120.283231] ? __pfx___get_user_pages+0x10/0x10 [ 2120.283252] ? lock_is_held_type+0x9e/0x120 [ 2120.283270] populate_vma_page_range+0x282/0x410 [ 2120.283290] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2120.283309] ? __pfx_find_vma_intersection+0x10/0x10 [ 2120.283326] ? do_mmap+0x6a4/0x11d0 [ 2120.283343] __mm_populate+0x100/0x3a0 [ 2120.283363] ? __pfx___mm_populate+0x10/0x10 [ 2120.283384] ? up_write+0x195/0x520 [ 2120.283397] ? lock_is_held_type+0x9e/0x120 [ 2120.283414] do_shmat+0xdd4/0x1310 [ 2120.283432] ? __pfx_do_shmat+0x10/0x10 [ 2120.283446] ? __x64_sys_futex+0x1c9/0x4d0 [ 2120.283460] ? __x64_sys_futex+0x1d2/0x4d0 [ 2120.283476] __x64_sys_shmat+0xcf/0x160 [ 2120.283489] ? xfd_validate_state+0x55/0x180 [ 2120.283508] ? __pfx___x64_sys_shmat+0x10/0x10 [ 2120.283523] ? do_syscall_64+0x85/0x360 [ 2120.283542] do_syscall_64+0xbf/0x360 [ 2120.283559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.283572] RIP: 0033:0x7f02f34a2b19 [ 2120.283583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2120.283595] RSP: 002b:00007f02f09f7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 2120.283607] RAX: ffffffffffffffda RBX: 00007f02f35b6020 RCX: 00007f02f34a2b19 [ 2120.283616] RDX: 0000000000006000 RSI: 0000000020ffa000 RDI: 0000000000008058 [ 2120.283624] RBP: 00007f02f34fcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2120.283632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.283639] R13: 00007ffe94ec6a2f R14: 00007f02f09f7300 R15: 0000000000022000 [ 2120.283658] [ 2120.310400] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 2120.310889] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2120.311521] Memory cgroup stats for /syz2: [ 2120.319987] anon 17022976 [ 2120.320778] file 296001536 [ 2120.321120] kernel 1548288 [ 2120.321382] kernel_stack 98304 [ 2120.321709] pagetables 200704 [ 2120.322088] sec_pagetables 0 [ 2120.322342] percpu 64 [ 2120.322538] sock 0 [ 2120.322721] vmalloc 0 [ 2120.322924] shmem 293789696 [ 2120.323179] file_mapped 4567040 [ 2120.323478] file_dirty 4096 [ 2120.323790] file_writeback 0 [ 2120.324146] swapcached 0 [ 2120.324366] inactive_anon 285331456 [ 2120.324653] active_anon 6115328 [ 2120.324915] inactive_file 8192 [ 2120.325195] active_file 0 [ 2120.325420] unevictable 21569536 [ 2120.325691] slab_reclaimable 894144 [ 2120.326038] slab_unreclaimable 357304 [ 2120.326465] slab 1251448 [ 2120.326788] workingset_refault_anon 0 [ 2120.327149] workingset_refault_file 4520 [ 2120.327565] workingset_activate_anon 0 [ 2120.327978] workingset_activate_file 892 [ 2120.328442] workingset_restore_anon 0 [ 2120.328746] workingset_restore_file 45 [ 2120.329125] workingset_nodereclaim 0 [ 2120.329512] pgdemote_kswapd 0 [ 2120.329827] pgdemote_direct 0 [ 2120.330107] pgdemote_khugepaged 0 [ 2120.330392] pgdemote_proactive 0 [ 2120.330742] pgscan 42264 [ 2120.331017] pgsteal 6034 [ 2120.331346] pswpin 0 [ 2120.331542] pswpout 0 [ 2120.331739] pgscan_kswapd 147 [ 2120.332016] pgscan_direct 42117 [ 2120.332371] pgscan_khugepaged 0 [ 2120.332722] pgscan_proactive 0 [ 2120.333121] pgsteal_kswapd 88 [ 2120.333375] pgsteal_direct 5946 [ 2120.333715] pgsteal_khugepaged 0 [ 2120.334098] pgsteal_proactive 0 [ 2120.334471] pgfault 1742877 [ 2120.334708] pgmajfault 19 [ 2120.334980] pgrefill 3476 [ 2120.335312] pgactivate 166678 [ 2120.335647] pgdeactivate 1155 [ 2120.335903] pglazyfree 0 [ 2120.336139] pglazyfreed 0 [ 2120.336433] swpin_zero 0 [ 2120.336715] swpout_zero 0 [ 2120.337032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12883,uid=0 [ 2120.338513] Memory cgroup out of memory: Killed process 12883 (syz-executor.2) total-vm:105812kB, anon-rss:16812kB, file-rss:37320kB, shmem-rss:2304kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 2123.103402] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2123.104241] CPU: 1 UID: 0 PID: 12891 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2123.104261] Tainted: [W]=WARN [ 2123.104265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2123.104273] Call Trace: [ 2123.104278] [ 2123.104284] dump_stack_lvl+0xfa/0x120 [ 2123.104307] dump_header+0x107/0x950 [ 2123.104330] oom_kill_process+0x278/0xa00 [ 2123.104350] out_of_memory+0x34b/0x1690 [ 2123.104373] ? __pfx_out_of_memory+0x10/0x10 [ 2123.104400] mem_cgroup_out_of_memory+0x164/0x190 [ 2123.104421] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2123.104445] ? mark_held_locks+0x49/0x80 [ 2123.104463] try_charge_memcg+0x81f/0xf30 [ 2123.104485] ? __pfx_try_charge_memcg+0x10/0x10 [ 2123.104508] charge_memcg+0x7b/0x290 [ 2123.104524] __mem_cgroup_charge+0x28/0x90 [ 2123.104542] __handle_mm_fault+0x14b5/0x3310 [ 2123.104562] ? __pfx_perf_trace_lock+0x10/0x10 [ 2123.104577] ? __pfx___handle_mm_fault+0x10/0x10 [ 2123.104594] ? __pte_offset_map_lock+0x190/0x330 [ 2123.104616] ? no_page_table+0xc7/0x220 [ 2123.104633] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2123.104656] handle_mm_fault+0x2c3/0x9b0 [ 2123.104677] __get_user_pages+0x58a/0x2f10 [ 2123.104707] ? __pfx___get_user_pages+0x10/0x10 [ 2123.104728] ? lock_is_held_type+0x9e/0x120 [ 2123.104746] populate_vma_page_range+0x282/0x410 [ 2123.104766] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2123.104785] ? __pfx_find_vma_intersection+0x10/0x10 [ 2123.104801] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2123.104818] __mm_populate+0x100/0x3a0 [ 2123.104838] ? __pfx___mm_populate+0x10/0x10 [ 2123.104858] ? up_write+0x195/0x520 [ 2123.104872] ? lock_is_held_type+0x9e/0x120 [ 2123.104888] __do_sys_mlockall+0x50f/0x5c0 [ 2123.104902] do_syscall_64+0xbf/0x360 [ 2123.104921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.104935] RIP: 0033:0x7fcae51b4b19 [ 2123.104945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2123.104957] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2123.104970] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2123.104978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2123.104986] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2123.104994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2123.105001] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2123.105020] [ 2123.105030] memory: usage 307200kB, limit 307200kB, failcnt 806 [ 2123.131958] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2123.132493] Memory cgroup stats for /syz5: [ 2123.139179] anon 14905344 [ 2123.139887] file 298356736 [ 2123.140354] kernel 1310720 [ 2123.140640] kernel_stack 65536 [ 2123.140971] pagetables 184320 [ 2123.141284] sec_pagetables 0 [ 2123.141663] percpu 64 [ 2123.141880] sock 0 [ 2123.142131] vmalloc 0 [ 2123.142451] shmem 298287104 [ 2123.142712] file_mapped 65536 [ 2123.143036] file_dirty 0 [ 2123.143340] file_writeback 0 [ 2123.143695] swapcached 0 [ 2123.143916] inactive_anon 298303488 [ 2123.144238] active_anon 4096 [ 2123.144533] inactive_file 0 [ 2123.144832] active_file 4096 [ 2123.145240] unevictable 14950400 [ 2123.145524] slab_reclaimable 908264 [ 2123.145822] slab_unreclaimable 178952 [ 2123.146157] slab 1087216 [ 2123.146443] workingset_refault_anon 0 [ 2123.146853] workingset_refault_file 9783 [ 2123.147331] workingset_activate_anon 0 [ 2123.147646] workingset_activate_file 6166 [ 2123.147992] workingset_restore_anon 0 [ 2123.148318] workingset_restore_file 4566 [ 2123.148647] workingset_nodereclaim 0 [ 2123.148952] pgdemote_kswapd 0 [ 2123.149234] pgdemote_direct 0 [ 2123.149491] pgdemote_khugepaged 0 [ 2123.149832] pgdemote_proactive 0 [ 2123.150198] pgscan 12581 [ 2123.150512] pgsteal 11823 [ 2123.150770] pswpin 0 [ 2123.151016] pswpout 0 [ 2123.151286] pgscan_kswapd 134 [ 2123.151630] pgscan_direct 12447 [ 2123.151929] pgscan_khugepaged 0 [ 2123.152287] pgscan_proactive 0 [ 2123.152665] pgsteal_kswapd 131 [ 2123.152933] pgsteal_direct 11692 [ 2123.153229] pgsteal_khugepaged 0 [ 2123.153549] pgsteal_proactive 0 [ 2123.153885] pgfault 512004 [ 2123.154257] pgmajfault 8 [ 2123.154487] pgrefill 26341 [ 2123.154763] pgactivate 51654 [ 2123.155107] pgdeactivate 6819 [ 2123.155468] pglazyfree 0 [ 2123.155694] pglazyfreed 0 [ 2123.155926] swpin_zero 0 [ 2123.156205] swpout_zero 0 [ 2123.156496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12890,uid=0 [ 2123.158010] Memory cgroup out of memory: Killed process 12890 (syz-executor.5) total-vm:93420kB, anon-rss:14636kB, file-rss:35592kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 18:56:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x1, 0x70}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560e, &(0x7f0000000140)) 18:56:44 executing program 5: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:44 executing program 6: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) 18:56:44 executing program 7: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa00}], 0x2e, 0x0, 0x0, 0x600000000000000) 18:56:44 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:44 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:56:44 executing program 4: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/87) write$tun(0xffffffffffffffff, &(0x7f00000011c0)={@void, @void, @eth={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0xaa, '!', "12562c", 0x6000, "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"}}}}}}, 0x101a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000001180)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/4096) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'gretap0\x00'}) close(r1) [ 2134.292786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2134.293491] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 2 [ 2134.294215] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 2134.294890] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 2134.295574] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 2134.296269] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 2134.296934] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 2134.884509] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2134.885323] CPU: 0 UID: 0 PID: 12900 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2134.885344] Tainted: [W]=WARN [ 2134.885348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2134.885357] Call Trace: [ 2134.885365] [ 2134.885371] dump_stack_lvl+0xfa/0x120 [ 2134.885396] dump_header+0x107/0x950 [ 2134.885419] oom_kill_process+0x278/0xa00 [ 2134.885440] out_of_memory+0x34b/0x1690 [ 2134.885461] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 2134.885477] ? __pfx_out_of_memory+0x10/0x10 [ 2134.885501] mem_cgroup_out_of_memory+0x164/0x190 [ 2134.885522] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2134.885546] ? mark_held_locks+0x49/0x80 [ 2134.885564] try_charge_memcg+0x81f/0xf30 [ 2134.885586] ? __pfx_try_charge_memcg+0x10/0x10 [ 2134.885609] charge_memcg+0x7b/0x290 [ 2134.885625] __mem_cgroup_charge+0x28/0x90 [ 2134.885643] __handle_mm_fault+0x14b5/0x3310 [ 2134.885665] ? __pfx_perf_trace_lock+0x10/0x10 [ 2134.885680] ? __pfx___handle_mm_fault+0x10/0x10 [ 2134.885697] ? __pte_offset_map_lock+0x190/0x330 [ 2134.885719] ? no_page_table+0xc7/0x220 [ 2134.885737] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2134.885760] handle_mm_fault+0x2c3/0x9b0 [ 2134.885781] __get_user_pages+0x58a/0x2f10 [ 2134.885812] ? __pfx___get_user_pages+0x10/0x10 [ 2134.885833] ? lock_is_held_type+0x9e/0x120 [ 2134.885851] populate_vma_page_range+0x282/0x410 [ 2134.885872] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2134.885890] ? __pfx_find_vma_intersection+0x10/0x10 [ 2134.885907] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2134.885924] __mm_populate+0x100/0x3a0 [ 2134.885944] ? __pfx___mm_populate+0x10/0x10 [ 2134.885965] ? up_write+0x195/0x520 [ 2134.885978] ? lock_is_held_type+0x9e/0x120 [ 2134.885995] __do_sys_mlockall+0x50f/0x5c0 [ 2134.886009] do_syscall_64+0xbf/0x360 [ 2134.886028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.886041] RIP: 0033:0x7fcae51b4b19 [ 2134.886053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2134.886070] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2134.886082] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2134.886091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2134.886098] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2134.886107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2134.886115] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2134.886134] [ 2134.904724] memory: usage 307200kB, limit 307200kB, failcnt 831 [ 2134.905208] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2134.905673] Memory cgroup stats for /syz5: [ 2134.979307] anon 14897152 [ 2134.980639] file 298360832 [ 2134.981118] kernel 1314816 [ 2134.981542] kernel_stack 65536 [ 2134.982014] pagetables 184320 [ 2134.982514] sec_pagetables 0 [ 2134.982958] percpu 64 [ 2134.983362] sock 0 [ 2134.983688] vmalloc 0 [ 2134.984044] shmem 298287104 [ 2134.984501] file_mapped 65536 [ 2134.984951] file_dirty 0 [ 2134.985383] file_writeback 0 [ 2134.988782] swapcached 0 [ 2134.990744] inactive_anon 298303488 [ 2134.991329] active_anon 4096 [ 2134.991775] inactive_file 0 [ 2134.992245] active_file 8192 [ 2134.992699] unevictable 14942208 [ 2134.993222] slab_reclaimable 908984 [ 2134.993747] slab_unreclaimable 178952 [ 2134.994335] slab 1087936 [ 2134.994726] workingset_refault_anon 0 [ 2134.995310] workingset_refault_file 9784 [ 2134.995906] workingset_activate_anon 0 [ 2134.996503] workingset_activate_file 6166 [ 2134.997125] workingset_restore_anon 0 [ 2134.997679] workingset_restore_file 4566 [ 2134.998285] workingset_nodereclaim 0 [ 2134.998836] pgdemote_kswapd 0 [ 2134.999334] pgdemote_direct 0 [ 2134.999800] pgdemote_khugepaged 0 [ 2135.000335] pgdemote_proactive 0 [ 2135.000828] pgscan 13013 [ 2135.001255] pgsteal 11823 [ 2135.001658] pswpin 0 [ 2135.002004] pswpout 0 [ 2135.002403] pgscan_kswapd 195 [ 2135.002868] pgscan_direct 12818 [ 2135.003385] pgscan_khugepaged 0 [ 2135.003876] pgscan_proactive 0 [ 2135.004404] pgsteal_kswapd 131 [ 2135.004887] pgsteal_direct 11692 [ 2135.005405] pgsteal_khugepaged 0 [ 2135.005899] pgsteal_proactive 0 [ 2135.006412] pgfault 515669 [ 2135.006831] pgmajfault 8 [ 2135.007267] pgrefill 26773 [ 2135.007680] pgactivate 52086 [ 2135.008153] pgdeactivate 7251 [ 2135.008608] pglazyfree 0 [ 2135.008997] pglazyfreed 0 [ 2135.009442] swpin_zero 0 [ 2135.009831] swpout_zero 0 [ 2135.010270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12898,uid=0 [ 2135.012390] Memory cgroup out of memory: Killed process 12898 (syz-executor.5) total-vm:93420kB, anon-rss:14764kB, file-rss:35592kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 18:56:44 executing program 1: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2162.021772] kworker/u10:0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 2162.023036] CPU: 1 UID: 0 PID: 26 Comm: kworker/u10:0 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2162.023060] Tainted: [W]=WARN [ 2162.023065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2162.023074] Workqueue: events_unbound cfg80211_wiphy_work [ 2162.023101] Call Trace: [ 2162.023106] [ 2162.023112] dump_stack_lvl+0xfa/0x120 [ 2162.023132] warn_alloc+0x211/0x360 [ 2162.023153] ? __pfx_warn_alloc+0x10/0x10 [ 2162.023187] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2162.023216] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2162.023237] ? __pfx_perf_trace_lock+0x10/0x10 [ 2162.023255] ? lock_acquire+0x15e/0x2f0 [ 2162.023269] ? unwind_next_frame+0xb9/0x2540 [ 2162.023291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2162.023309] ? policy_nodemask+0xeb/0x4e0 [ 2162.023328] alloc_pages_mpol+0xed/0x340 [ 2162.023343] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2162.023357] ? lock_is_held_type+0x9e/0x120 [ 2162.023378] new_slab+0x245/0x2f0 [ 2162.023396] ___slab_alloc+0x92e/0x1280 [ 2162.023411] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2162.023437] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2162.023450] ? __kmalloc_noprof+0x295/0x4b0 [ 2162.023465] __kmalloc_noprof+0x295/0x4b0 [ 2162.023481] ? register_lock_class+0x41/0x560 [ 2162.023499] ieee802_11_parse_elems_full+0x187/0x3190 [ 2162.023517] ? __pfx_perf_trace_lock+0x10/0x10 [ 2162.023532] ? perf_trace_lock+0xb5/0x5d0 [ 2162.023545] ? do_raw_spin_lock+0x123/0x260 [ 2162.023563] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2162.023576] ? paint_ptr+0x36/0x90 [ 2162.023591] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2162.023619] ? mark_held_locks+0x49/0x80 [ 2162.023636] ieee80211_inform_bss+0xf3/0x10b0 [ 2162.023652] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2162.023668] ? trace_kmalloc+0x1f/0xb0 [ 2162.023685] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 2162.023698] cfg80211_inform_single_bss_data+0x7da/0x1bd0 [ 2162.023721] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2162.023737] ? ret_from_fork_asm+0x1a/0x30 [ 2162.023771] ? stack_trace_save+0x8e/0xc0 [ 2162.023787] ? stack_depot_save_flags+0x2c/0xa20 [ 2162.023808] cfg80211_inform_bss_data+0x20e/0x34e0 [ 2162.023825] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2162.023838] ? kasan_save_stack+0x24/0x50 [ 2162.023850] ? __kasan_kmalloc+0x7f/0x90 [ 2162.023861] ? __kmalloc_noprof+0x1f6/0x4b0 [ 2162.023876] ? ieee80211_ibss_rx_queued_mgmt+0xc7d/0x2f50 [ 2162.023889] ? ieee80211_iface_work+0xd52/0x1220 [ 2162.023901] ? cfg80211_wiphy_work+0x245/0x480 [ 2162.023917] ? process_one_work+0x8e1/0x19c0 [ 2162.023931] ? worker_thread+0x67e/0xe90 [ 2162.023942] ? kthread+0x3c8/0x740 [ 2162.023953] ? ret_from_fork+0x34b/0x430 [ 2162.023972] ? ret_from_fork_asm+0x1a/0x30 [ 2162.023991] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2162.024007] ? perf_trace_lock+0xb5/0x5d0 [ 2162.024023] ? __pfx_perf_trace_lock+0x10/0x10 [ 2162.024036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2162.024051] ? _ieee802_11_parse_elems_full+0x5cb/0x3fd0 [ 2162.024079] ? perf_trace_lock+0xb5/0x5d0 [ 2162.024095] ? __pfx_perf_trace_lock+0x10/0x10 [ 2162.024115] cfg80211_inform_bss_frame_data+0x253/0x6b0 [ 2162.024137] ieee80211_bss_info_update+0x2f5/0xa90 [ 2162.024152] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2162.024170] ? find_held_lock+0x2b/0x80 [ 2162.024186] ? ieee80211_ibss_rx_queued_mgmt+0x187d/0x2f50 [ 2162.024199] ? lock_release+0xc8/0x290 [ 2162.024215] ieee80211_ibss_rx_queued_mgmt+0x18b3/0x2f50 [ 2162.024228] ? __lock_acquire+0xc65/0x1b70 [ 2162.024248] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2162.024261] ? perf_trace_lock+0xb5/0x5d0 [ 2162.024277] ? __pfx_perf_trace_lock+0x10/0x10 [ 2162.024292] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2162.024317] ? mark_held_locks+0x49/0x80 [ 2162.024337] ieee80211_iface_work+0xd52/0x1220 [ 2162.024355] cfg80211_wiphy_work+0x245/0x480 [ 2162.024375] process_one_work+0x8e1/0x19c0 [ 2162.024397] ? __pfx_process_one_work+0x10/0x10 [ 2162.024410] ? move_linked_works+0x172/0x270 [ 2162.024431] ? assign_work+0x196/0x240 [ 2162.024447] worker_thread+0x67e/0xe90 [ 2162.024461] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2162.024485] ? __pfx_worker_thread+0x10/0x10 [ 2162.024500] kthread+0x3c8/0x740 [ 2162.024511] ? __pfx_kthread+0x10/0x10 [ 2162.024523] ? ret_from_fork+0x23/0x430 [ 2162.024541] ? lock_release+0xc8/0x290 [ 2162.024554] ? __pfx_kthread+0x10/0x10 [ 2162.024567] ret_from_fork+0x34b/0x430 [ 2162.024585] ? __pfx_kthread+0x10/0x10 [ 2162.024597] ret_from_fork_asm+0x1a/0x30 [ 2162.024622] [ 2162.058589] Mem-Info: [ 2162.058804] active_anon:9941 inactive_anon:251424 isolated_anon:0 [ 2162.058804] active_file:2479 inactive_file:7879 isolated_file:32 [ 2162.058804] unevictable:0 dirty:0 writeback:0 [ 2162.058804] slab_reclaimable:4155 slab_unreclaimable:53771 [ 2162.058804] mapped:70019 shmem:212673 pagetables:1760 [ 2162.058804] sec_pagetables:0 bounce:0 [ 2162.058804] kernel_misc_reclaimable:0 [ 2162.058804] free:2411 free_pcp:990 free_cma:0 [ 2162.061973] Node 0 active_anon:39764kB inactive_anon:1005696kB active_file:9056kB inactive_file:32360kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:280076kB dirty:0kB writeback:0kB shmem:850692kB kernel_stack:4640kB pagetables:7040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2162.064260] Node 0 DMA free:6436kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8080kB active_file:64kB inactive_file:296kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2162.066635] lowmem_reserve[]: 0 1601 1601 1601 [ 2162.067032] Node 0 DMA32 free:7008kB boost:0kB min:5076kB low:6700kB high:8324kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:39764kB inactive_anon:997616kB active_file:7596kB inactive_file:33544kB unevictable:0kB writepending:0kB present:2080640kB managed:1639520kB mlocked:0kB bounce:0kB free_pcp:524kB local_pcp:0kB free_cma:0kB [ 2162.069527] lowmem_reserve[]: 0 0 0 0 [ 2162.069989] Node 0 DMA: 31*4kB (UM) 11*8kB (UM) 12*16kB (UM) 3*32kB (UM) 3*64kB (UM) 1*128kB (U) 2*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 1*4096kB (E) = 6452kB [ 2162.071299] Node 0 DMA32: 528*4kB (UME) 302*8kB (M) 149*16kB (ME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6912kB [ 2162.072403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2162.073271] 223152 total pagecache pages [ 2162.073601] 0 pages in swap cache [ 2162.073881] Free swap = 0kB [ 2162.074150] Total swap = 0kB [ 2162.074402] 524158 pages RAM [ 2162.074659] 0 pages HighMem/MovableOnly [ 2162.074978] 110438 pages reserved [ 2162.075306] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2162.076114] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2162.076851] node 0: slabs: 542, objs: 5368, free: 181 18:57:18 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000080)=0x80000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) 18:57:19 executing program 5: splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffff0000, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlockall(0x3) shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="040000ed000000002e2f66696c673000ad16ac544a00c50519e472192ec01b67416d34a931ca675d2ab4403c9c8f8e9bc470bc701875b6ca285cada6492ec2e499556b28f91134566046c0e494c11931517118cf06e3d07299ff88d3cf227886b850c197fa9e766f145ca54b6d905f904502adc904457c558d15fca46899fa7786807a1a4dbb2cafedd5f4b08fb3f5d0805fa633e0865e7739d5ac61b83a3a84a3"]) [ 2169.906699] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2169.907569] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2169.908341] node 0: slabs: 496, objs: 4968, free: 0 [ 2169.908830] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2169.909837] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2169.910609] node 0: slabs: 496, objs: 4968, free: 0 [ 2169.911105] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2169.911892] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2169.912686] node 0: slabs: 496, objs: 4968, free: 0 [ 2169.913194] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2169.913992] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2169.914786] node 0: slabs: 496, objs: 4968, free: 0 [ 2169.915286] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2169.916118] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2169.916856] node 0: slabs: 496, objs: 4968, free: 0 [ 2169.919154] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2169.919963] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2169.920730] node 0: slabs: 496, objs: 4968, free: 0 [ 2170.315601] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2170.315635] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2170.316813] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2170.318332] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2170.319170] node 0: slabs: 546, objs: 5068, free: 0 [ 2170.320553] node 0: slabs: 546, objs: 5068, free: 0 [ 2170.321110] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2170.322676] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2170.323527] node 0: slabs: 546, objs: 5068, free: 0 [ 2170.324013] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2170.324914] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2170.325752] node 0: slabs: 546, objs: 5068, free: 0 [ 2172.208804] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2172.209625] CPU: 0 UID: 0 PID: 12921 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2172.209649] Tainted: [W]=WARN [ 2172.209654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.209663] Call Trace: [ 2172.209668] [ 2172.209673] dump_stack_lvl+0xfa/0x120 [ 2172.209696] dump_header+0x107/0x950 [ 2172.209718] oom_kill_process+0x278/0xa00 [ 2172.209738] out_of_memory+0x34b/0x1690 [ 2172.209760] ? __pfx_out_of_memory+0x10/0x10 [ 2172.209784] mem_cgroup_out_of_memory+0x164/0x190 [ 2172.209804] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2172.209828] ? mark_held_locks+0x49/0x80 [ 2172.209846] try_charge_memcg+0x81f/0xf30 [ 2172.209868] ? __pfx_try_charge_memcg+0x10/0x10 [ 2172.209890] charge_memcg+0x7b/0x290 [ 2172.209906] __mem_cgroup_charge+0x28/0x90 [ 2172.209924] __handle_mm_fault+0x14b5/0x3310 [ 2172.209944] ? __pfx_perf_trace_lock+0x10/0x10 [ 2172.209959] ? __pfx___handle_mm_fault+0x10/0x10 [ 2172.209975] ? __pte_offset_map_lock+0x190/0x330 [ 2172.209998] ? no_page_table+0xc7/0x220 [ 2172.210014] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 2172.210036] handle_mm_fault+0x2c3/0x9b0 [ 2172.210061] __get_user_pages+0x58a/0x2f10 [ 2172.210092] ? __pfx___get_user_pages+0x10/0x10 [ 2172.210112] ? lock_is_held_type+0x9e/0x120 [ 2172.210130] populate_vma_page_range+0x282/0x410 [ 2172.210150] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2172.210168] ? __pfx_find_vma_intersection+0x10/0x10 [ 2172.210184] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 2172.210200] __mm_populate+0x100/0x3a0 [ 2172.210220] ? __pfx___mm_populate+0x10/0x10 [ 2172.210241] ? up_write+0x195/0x520 [ 2172.210254] ? lock_is_held_type+0x9e/0x120 [ 2172.210271] __do_sys_mlockall+0x50f/0x5c0 [ 2172.210285] do_syscall_64+0xbf/0x360 [ 2172.210303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.210316] RIP: 0033:0x7fcae51b4b19 [ 2172.210327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.210339] RSP: 002b:00007fcae272a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2172.210351] RAX: ffffffffffffffda RBX: 00007fcae52c7f60 RCX: 00007fcae51b4b19 [ 2172.210360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2172.210367] RBP: 00007fcae520ef6d R08: 0000000000000000 R09: 0000000000000000 [ 2172.210375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2172.210382] R13: 00007ffd8c770c2f R14: 00007fcae272a300 R15: 0000000000022000 [ 2172.210401] [ 2172.231605] memory: usage 307200kB, limit 307200kB, failcnt 868 [ 2172.232182] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2172.232722] Memory cgroup stats for /syz5: [ 2172.239893] anon 14905344 [ 2172.240563] file 298352640 [ 2172.240829] kernel 1314816 [ 2172.241191] kernel_stack 65536 [ 2172.241490] pagetables 184320 [ 2172.241776] sec_pagetables 0 [ 2172.242092] percpu 64 [ 2172.242322] sock 0 [ 2172.242529] vmalloc 0 [ 2172.242761] shmem 298287104 [ 2172.243034] file_mapped 65536 [ 2172.243364] file_dirty 0 [ 2172.243615] file_writeback 0 [ 2172.243893] swapcached 0 [ 2172.244172] inactive_anon 298303488 [ 2172.244504] active_anon 4096 [ 2172.244789] inactive_file 0 [ 2172.245085] active_file 0 [ 2172.245344] unevictable 14950400 [ 2172.245652] slab_reclaimable 908504 [ 2172.245983] slab_unreclaimable 178952 [ 2172.246357] slab 1087456 [ 2172.246606] workingset_refault_anon 0 [ 2172.246952] workingset_refault_file 9784 [ 2172.247345] workingset_activate_anon 0 [ 2172.247694] workingset_activate_file 6166 [ 2172.248087] workingset_restore_anon 0 [ 2172.248429] workingset_restore_file 4566 [ 2172.248798] workingset_nodereclaim 0 [ 2172.249159] pgdemote_kswapd 0 [ 2172.249453] pgdemote_direct 0 [ 2172.249736] pgdemote_khugepaged 0 [ 2172.250082] pgdemote_proactive 0 [ 2172.250394] pgscan 13194 [ 2172.250649] pgsteal 11825 [ 2172.250908] pswpin 0 [ 2172.251170] pswpout 0 [ 2172.251397] pgscan_kswapd 217 [ 2172.251686] pgscan_direct 12977 [ 2172.251984] pgscan_khugepaged 0 [ 2172.252314] pgscan_proactive 0 [ 2172.252611] pgsteal_kswapd 132 [ 2172.252906] pgsteal_direct 11693 [ 2172.253242] pgsteal_khugepaged 0 [ 2172.253553] pgsteal_proactive 0 [ 2172.253855] pgfault 519331 [ 2172.254145] pgmajfault 8 [ 2172.254394] pgrefill 26954 [ 2172.254657] pgactivate 52265 [ 2172.254943] pgdeactivate 7432 [ 2172.255259] pglazyfree 0 [ 2172.255509] pglazyfreed 0 [ 2172.255766] swpin_zero 0 [ 2172.256011] swpout_zero 0 [ 2172.256297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12919,uid=0 [ 2172.257620] Memory cgroup out of memory: Killed process 12919 (syz-executor.5) total-vm:93420kB, anon-rss:14764kB, file-rss:35592kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 2182.704831] warn_alloc: 18 callbacks suppressed [ 2182.704850] kworker/u9:0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/ [ 2182.705343] slab_out_of_memory: 8 callbacks suppressed [ 2182.705353] ,mems_allowed=0 [ 2182.705366] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.706261] [ 2182.706275] CPU: 0 UID: 0 PID: 11284 Comm: kworker/u9:0 Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2182.706294] Tainted: [W]=WARN [ 2182.706298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.706306] Workqueue: events_unbound cfg80211_wiphy_work [ 2182.706331] Call Trace: [ 2182.706336] [ 2182.706342] dump_stack_lvl+0xfa/0x120 [ 2182.706360] warn_alloc+0x211/0x360 [ 2182.706380] ? __pfx_warn_alloc+0x10/0x10 [ 2182.706412] __alloc_frozen_pages_noprof+0x125e/0x1f20 [ 2182.706438] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2182.706454] ? __pfx_perf_trace_lock+0x10/0x10 [ 2182.706475] ? find_held_lock+0x2b/0x80 [ 2182.706496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2182.706512] ? policy_nodemask+0xeb/0x4e0 [ 2182.706530] alloc_pages_mpol+0xed/0x340 [ 2182.706545] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2182.706559] ? lock_is_held_type+0x9e/0x120 [ 2182.706580] new_slab+0x245/0x2f0 [ 2182.706597] ___slab_alloc+0x92e/0x1280 [ 2182.706612] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2182.706630] ? unwind_next_frame+0x3b2/0x2540 [ 2182.706649] ? lock_release+0xc8/0x290 [ 2182.706666] ? ieee802_11_parse_elems_full+0x187/0x3190 [ 2182.706679] ? __kmalloc_noprof+0x295/0x4b0 [ 2182.706694] __kmalloc_noprof+0x295/0x4b0 [ 2182.706709] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2182.706730] ieee802_11_parse_elems_full+0x187/0x3190 [ 2182.706745] ? ret_from_fork_asm+0x1a/0x30 [ 2182.706768] ? stack_depot_save_flags+0x2c/0xa20 [ 2182.706789] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2182.706804] ? kasan_save_stack+0x34/0x50 [ 2182.706820] ? perf_trace_lock+0xb5/0x5d0 [ 2182.706836] ? __pfx_perf_trace_lock+0x10/0x10 [ 2182.706852] ieee80211_ibss_rx_queued_mgmt+0xc7d/0x2f50 [ 2182.706873] ? __lock_acquire+0xc65/0x1b70 [ 2182.706893] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2182.706906] ? perf_trace_lock+0xb5/0x5d0 [ 2182.706922] ? __pfx_perf_trace_lock+0x10/0x10 [ 2182.706936] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2182.706964] ? mark_held_locks+0x49/0x80 [ 2182.706984] ieee80211_iface_work+0xd52/0x1220 [ 2182.707002] cfg80211_wiphy_work+0x245/0x480 [ 2182.707022] process_one_work+0x8e1/0x19c0 [ 2182.707045] ? __pfx_process_one_work+0x10/0x10 [ 2182.707063] ? move_linked_works+0x172/0x270 [ 2182.707083] ? assign_work+0x196/0x240 [ 2182.707099] worker_thread+0x67e/0xe90 [ 2182.707113] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2182.707137] ? __pfx_worker_thread+0x10/0x10 [ 2182.707151] kthread+0x3c8/0x740 [ 2182.707164] ? __pfx_kthread+0x10/0x10 [ 2182.707176] ? ret_from_fork+0x23/0x430 [ 2182.707196] ? _raw_spin_unlock_irq+0x23/0x40 [ 2182.707209] ? __pfx_kthread+0x10/0x10 [ 2182.707222] ret_from_fork+0x34b/0x430 [ 2182.707239] ? __pfx_kthread+0x10/0x10 [ 2182.707252] ret_from_fork_asm+0x1a/0x30 [ 2182.707277] [ 2182.707300] Mem-Info: [ 2182.707729] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.707869] active_anon:9941 inactive_anon:257571 isolated_anon:0 [ 2182.707869] active_file:994 inactive_file:2763 isolated_file:32 [ 2182.707869] unevictable:0 dirty:0 writeback:0 [ 2182.707869] slab_reclaimable:4164 slab_unreclaimable:54435 [ 2182.707869] mapped:69911 shmem:218817 pagetables:1760 [ 2182.707869] sec_pagetables:0 bounce:0 [ 2182.707869] kernel_misc_reclaimable:0 [ 2182.707869] free:1998 free_pcp:1203 free_cma:0 [ 2182.708811] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.709079] Node 0 active_anon:39764kB inactive_anon:1030284kB active_file:3976kB inactive_file:11052kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:279644kB dirty:0kB writeback:0kB shmem:875268kB kernel_stack:4672kB pagetables:7040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2182.709816] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.710148] Node 0 [ 2182.710356] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.710540] DMA free:6424kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8196kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2182.710851] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.711164] lowmem_reserve[]: [ 2182.711555] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.711875] 0 [ 2182.712329] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.712686] 1601 [ 2182.713003] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.713417] 1601 [ 2182.713805] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.714073] 1601 [ 2182.714451] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.714785] Node 0 [ 2182.715087] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.715398] DMA32 free:1568kB boost:8192kB min:13268kB low:14892kB high:16516kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:39764kB inactive_anon:1022088kB active_file:3976kB inactive_file:11000kB unevictable:0kB writepending:0kB present:2080640kB managed:1639520kB mlocked:0kB bounce:0kB free_pcp:4808kB local_pcp:1468kB free_cma:0kB [ 2182.715877] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.716168] lowmem_reserve[]: 0 [ 2182.716478] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.716866] 0 [ 2182.717222] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.717526] 0 [ 2182.718012] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.718342] 0 [ 2182.718678] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.719076] Node 0 [ 2182.719505] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.719805] DMA: [ 2182.720196] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.720487] 43*4kB [ 2182.720907] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.721261] (UM) [ 2182.721709] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.722028] 23*8kB [ 2182.722460] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.722855] (UM) [ 2182.723288] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.723649] 15*16kB [ 2182.723994] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.724373] (UM) 2*32kB (M) 2*64kB (M) 0*128kB 2*256kB (UM) [ 2182.724803] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.725119] 0*512kB [ 2182.725422] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.725732] 1*1024kB [ 2182.726154] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.726502] (M) [ 2182.726812] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 2182.727097] 0*2048kB 1*4096kB [ 2182.727415] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 2182.727748] (E) [ 2182.728049] node 0: slabs: 795, objs: 6126, free: 0 [ 2182.728368] = 6420kB [ 2182.759973] Node 0 DMA32: 153*4kB (M) 386*8kB (M) 96*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5236kB [ 2182.760963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2182.761604] 222429 total pagecache pages [ 2182.761903] 0 pages in swap cache [ 2182.762179] Free swap = 0kB [ 2182.762409] Total swap = 0kB [ 2182.762651] 524158 pages RAM [ 2182.762888] 0 pages HighMem/MovableOnly [ 2182.763200] 110438 pages reserved [ 2200.003039] syz-fuzzer invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2200.004401] CPU: 1 UID: 0 PID: 4006 Comm: syz-fuzzer Tainted: G W 6.17.0-rc3-next-20250826 #1 PREEMPT(voluntary) [ 2200.004421] Tainted: [W]=WARN [ 2200.004425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2200.004433] Call Trace: [ 2200.004439] [ 2200.004444] dump_stack_lvl+0xfa/0x120 [ 2200.004468] dump_header+0x107/0x950 [ 2200.004490] oom_kill_process+0x278/0xa00 [ 2200.004506] ? oom_cpuset_eligible.isra.0+0x19b/0x2d0 [ 2200.004525] out_of_memory+0x138f/0x1690 [ 2200.004547] ? __pfx_out_of_memory+0x10/0x10 [ 2200.004570] __alloc_frozen_pages_noprof+0x1980/0x1f20 [ 2200.004598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2200.004620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2200.004640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2200.004656] ? policy_nodemask+0xeb/0x4e0 [ 2200.004674] alloc_pages_mpol+0xed/0x340 [ 2200.004689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2200.004705] ? filemap_get_entry+0x1b1/0x3b0 [ 2200.004724] ? lock_release+0xc8/0x290 [ 2200.004741] folio_alloc_noprof+0x22/0x290 [ 2200.004758] filemap_alloc_folio_noprof+0x376/0x420 [ 2200.004776] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 2200.004792] ? down_read+0x1b1/0x470 [ 2200.004812] __filemap_get_folio+0x384/0x960 [ 2200.004834] filemap_fault+0x1889/0x2ca0 [ 2200.004859] ? __pfx_filemap_fault+0x10/0x10 [ 2200.004888] __do_fault+0x10d/0x480 [ 2200.004904] __handle_mm_fault+0x11cc/0x3310 [ 2200.004921] ? lock_vma_under_rcu+0x11e/0x530 [ 2200.004936] ? __pfx___handle_mm_fault+0x10/0x10 [ 2200.004953] ? lock_vma_under_rcu+0x17b/0x530 [ 2200.004973] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2200.004998] handle_mm_fault+0x2c3/0x9b0 [ 2200.005015] ? access_error+0x17d/0x380 [ 2200.005032] do_user_addr_fault+0x4fa/0xeb0 [ 2200.005055] exc_page_fault+0xb0/0x180 [ 2200.005071] asm_exc_page_fault+0x26/0x30 [ 2200.005083] RIP: 0033:0x416498 [ 2200.005101] Code: Unable to access opcode bytes at 0x41646e. [ 2200.005107] RSP: 002b:000000c0006af6a0 EFLAGS: 00010217 [ 2200.005117] RAX: 000000c0006af650 RBX: 000000c000031500 RCX: 000000c0003d4c00 [ 2200.005125] RDX: 00007f52d59c97d0 RSI: 0000000000000000 RDI: 0000000000000038 [ 2200.005132] RBP: 000000c0006af738 R08: 0000000000957760 R09: 00007f52d5a09000 [ 2200.005140] R10: 000000c0054bfe40 R11: 0000000000000001 R12: ffffffffffffffff [ 2200.005148] R13: 000000000000007a R14: 0000000000000079 R15: 0000000000000080 [ 2200.005166] [ 2200.027379] Mem-Info: [ 2200.027597] active_anon:9941 inactive_anon:257573 isolated_anon:0 [ 2200.027597] active_file:147 inactive_file:1177 isolated_file:0 [ 2200.027597] unevictable:0 dirty:2 writeback:0 [ 2200.027597] slab_reclaimable:4147 slab_unreclaimable:55400 [ 2200.027597] mapped:69707 shmem:218817 pagetables:1760 [ 2200.027597] sec_pagetables:0 bounce:0 [ 2200.027597] kernel_misc_reclaimable:0 [ 2200.027597] free:4723 free_pcp:8 free_cma:0 [ 2200.031510] Node 0 active_anon:39764kB inactive_anon:1030292kB active_file:588kB inactive_file:4088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278828kB dirty:8kB writeback:0kB shmem:875268kB kernel_stack:4640kB pagetables:7040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2200.033614] Node 0 DMA free:6436kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8196kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2200.035813] lowmem_reserve[]: 0 1601 1601 1601 [ 2200.036227] Node 0 DMA32 free:13800kB boost:12484kB min:17560kB low:19184kB high:20808kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:39764kB inactive_anon:1022096kB active_file:588kB inactive_file:3360kB unevictable:0kB writepending:8kB present:2080640kB managed:1639520kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2200.038648] lowmem_reserve[]: 0 0 0 0 [ 2200.038984] Node 0 DMA: 55*4kB (UM) 27*8kB (UM) 19*16kB (UM) 2*32kB (M) 2*64kB (M) 1*128kB (U) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 1*4096kB (E) = 6436kB [ 2200.040389] Node 0 DMA32: 1895*4kB (UME) 505*8kB (ME) 153*16kB (UM) 5*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 14292kB [ 2200.041658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2200.042352] 219646 total pagecache pages [ 2200.042681] 0 pages in swap cache [ 2200.042961] Free swap = 0kB [ 2200.043238] Total swap = 0kB [ 2200.043494] 524158 pages RAM [ 2200.043743] 0 pages HighMem/MovableOnly [ 2200.044079] 110438 pages reserved [ 2200.044363] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=4006,uid=0 [ 2200.046547] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1169744kB, anon-rss:160256kB, file-rss:308kB, shmem-rss:0kB, UID:0 pgtables:740kB oom_score_adj:0 VM DIAGNOSIS: 18:57:51 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81913bea RDX=ffff88800984d280 RSI=ffffffff81913bf7 RDI=0000000000000001 RBP=ffffea00013dec40 RSP=ffff888047427500 R8 =0000000000000000 R9 =fffff9400027bd88 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888047427730 RIP=ffffffff8173b968 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e0000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f75eb3bcef0 CR3=000000000e62c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=0000000000ff000000000000000000ff XMM02=0000000000ff000000000000000000ff XMM03=af01752b4112b9a8000000000012b880 XMM04=8e075d4736c8f8c200000000000ae988 XMM05=df27e09ae64f1c9f00000000007179b8 XMM06=4f9102031d4c890a000000000012b940 XMM07=ee7587d5db12e8e3000000000010c460 XMM08=636f72702f0064696e6f697373657300 XMM09=00000000000000000000000000000000 XMM10=00000000200020000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81af439d RBX=ffffffff8650be78 RCX=ffffffff81af438e RDX=0000000000000000 RSI=ffffffff86893f6a RDI=ffffffff8650be4c RBP=ffffffff8650be6c RSP=ffff88806cf089c0 R8 =ffffffff86893f6a R9 =0000000000000000 R10=000000000003bda3 R11=00000000000248ad R12=ffffffff8650be74 R13=ffffffff8650be4c R14=ffffffff8650be68 R15=dffffc0000000000 RIP=ffffffff81354b7f RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e0000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9724941028 CR3=000000001a70a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000