Warning: Permanently added '[localhost]:15640' (ECDSA) to the list of known hosts. 2022/09/12 15:23:01 fuzzer started 2022/09/12 15:23:01 dialing manager at localhost:38027 syzkaller login: [ 40.101334] cgroup: Unknown subsys name 'net' [ 40.210020] cgroup: Unknown subsys name 'rlimit' 2022/09/12 15:23:16 syscalls: 2215 2022/09/12 15:23:16 code coverage: enabled 2022/09/12 15:23:16 comparison tracing: enabled 2022/09/12 15:23:16 extra coverage: enabled 2022/09/12 15:23:16 setuid sandbox: enabled 2022/09/12 15:23:16 namespace sandbox: enabled 2022/09/12 15:23:16 Android sandbox: enabled 2022/09/12 15:23:16 fault injection: enabled 2022/09/12 15:23:16 leak checking: enabled 2022/09/12 15:23:16 net packet injection: enabled 2022/09/12 15:23:16 net device setup: enabled 2022/09/12 15:23:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 15:23:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 15:23:16 USB emulation: enabled 2022/09/12 15:23:16 hci packet injection: enabled 2022/09/12 15:23:16 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 15:23:16 802.15.4 emulation: enabled 2022/09/12 15:23:16 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 15:23:16 fetching corpus: 50, signal 30550/34003 (executing program) 2022/09/12 15:23:16 fetching corpus: 100, signal 45579/50362 (executing program) 2022/09/12 15:23:16 fetching corpus: 150, signal 55486/61455 (executing program) 2022/09/12 15:23:16 fetching corpus: 200, signal 61453/68658 (executing program) 2022/09/12 15:23:16 fetching corpus: 250, signal 68051/76346 (executing program) 2022/09/12 15:23:17 fetching corpus: 300, signal 73319/82648 (executing program) 2022/09/12 15:23:17 fetching corpus: 350, signal 79147/89355 (executing program) 2022/09/12 15:23:17 fetching corpus: 400, signal 84765/95859 (executing program) 2022/09/12 15:23:17 fetching corpus: 450, signal 88998/100961 (executing program) 2022/09/12 15:23:17 fetching corpus: 500, signal 93002/105724 (executing program) 2022/09/12 15:23:17 fetching corpus: 550, signal 96229/109766 (executing program) 2022/09/12 15:23:18 fetching corpus: 600, signal 99553/113819 (executing program) 2022/09/12 15:23:18 fetching corpus: 650, signal 102722/117682 (executing program) 2022/09/12 15:23:18 fetching corpus: 700, signal 105415/121127 (executing program) 2022/09/12 15:23:18 fetching corpus: 750, signal 108811/125079 (executing program) 2022/09/12 15:23:18 fetching corpus: 800, signal 110924/127847 (executing program) 2022/09/12 15:23:18 fetching corpus: 850, signal 113485/130957 (executing program) 2022/09/12 15:23:18 fetching corpus: 900, signal 116618/134537 (executing program) 2022/09/12 15:23:19 fetching corpus: 950, signal 118673/137199 (executing program) 2022/09/12 15:23:19 fetching corpus: 1000, signal 120926/139980 (executing program) 2022/09/12 15:23:19 fetching corpus: 1050, signal 123297/142794 (executing program) 2022/09/12 15:23:19 fetching corpus: 1100, signal 124563/144708 (executing program) 2022/09/12 15:23:19 fetching corpus: 1150, signal 126440/147093 (executing program) 2022/09/12 15:23:19 fetching corpus: 1200, signal 127530/148803 (executing program) 2022/09/12 15:23:19 fetching corpus: 1250, signal 129347/151062 (executing program) 2022/09/12 15:23:19 fetching corpus: 1300, signal 131700/153655 (executing program) 2022/09/12 15:23:20 fetching corpus: 1350, signal 134199/156375 (executing program) 2022/09/12 15:23:20 fetching corpus: 1400, signal 136299/158727 (executing program) 2022/09/12 15:23:20 fetching corpus: 1450, signal 137524/160417 (executing program) 2022/09/12 15:23:20 fetching corpus: 1500, signal 138812/162114 (executing program) 2022/09/12 15:23:20 fetching corpus: 1550, signal 141046/164425 (executing program) 2022/09/12 15:23:20 fetching corpus: 1600, signal 142247/165994 (executing program) 2022/09/12 15:23:20 fetching corpus: 1650, signal 143824/167928 (executing program) 2022/09/12 15:23:21 fetching corpus: 1700, signal 146047/170216 (executing program) 2022/09/12 15:23:21 fetching corpus: 1750, signal 147316/171757 (executing program) 2022/09/12 15:23:21 fetching corpus: 1800, signal 149288/173763 (executing program) 2022/09/12 15:23:21 fetching corpus: 1850, signal 150229/175115 (executing program) 2022/09/12 15:23:21 fetching corpus: 1900, signal 152155/177002 (executing program) 2022/09/12 15:23:21 fetching corpus: 1950, signal 153983/178868 (executing program) 2022/09/12 15:23:21 fetching corpus: 2000, signal 155101/180172 (executing program) 2022/09/12 15:23:22 fetching corpus: 2050, signal 156318/181590 (executing program) 2022/09/12 15:23:22 fetching corpus: 2100, signal 157683/183015 (executing program) 2022/09/12 15:23:22 fetching corpus: 2150, signal 159318/184650 (executing program) 2022/09/12 15:23:22 fetching corpus: 2200, signal 160431/185909 (executing program) 2022/09/12 15:23:22 fetching corpus: 2250, signal 161904/187351 (executing program) 2022/09/12 15:23:22 fetching corpus: 2300, signal 162893/188536 (executing program) 2022/09/12 15:23:22 fetching corpus: 2350, signal 163806/189582 (executing program) 2022/09/12 15:23:22 fetching corpus: 2400, signal 164816/190667 (executing program) 2022/09/12 15:23:23 fetching corpus: 2450, signal 165870/191741 (executing program) 2022/09/12 15:23:23 fetching corpus: 2500, signal 166692/192711 (executing program) 2022/09/12 15:23:23 fetching corpus: 2550, signal 167914/193890 (executing program) 2022/09/12 15:23:23 fetching corpus: 2600, signal 169301/195119 (executing program) 2022/09/12 15:23:23 fetching corpus: 2650, signal 170853/196372 (executing program) 2022/09/12 15:23:23 fetching corpus: 2700, signal 172091/197549 (executing program) 2022/09/12 15:23:23 fetching corpus: 2750, signal 173326/198616 (executing program) 2022/09/12 15:23:24 fetching corpus: 2800, signal 174082/199450 (executing program) 2022/09/12 15:23:24 fetching corpus: 2850, signal 174738/200227 (executing program) 2022/09/12 15:23:24 fetching corpus: 2900, signal 176095/201288 (executing program) 2022/09/12 15:23:24 fetching corpus: 2950, signal 177074/202179 (executing program) 2022/09/12 15:23:24 fetching corpus: 3000, signal 178286/203103 (executing program) 2022/09/12 15:23:24 fetching corpus: 3050, signal 179335/203984 (executing program) 2022/09/12 15:23:24 fetching corpus: 3100, signal 180694/204980 (executing program) 2022/09/12 15:23:25 fetching corpus: 3150, signal 181318/205603 (executing program) 2022/09/12 15:23:25 fetching corpus: 3200, signal 182242/206398 (executing program) 2022/09/12 15:23:25 fetching corpus: 3250, signal 183139/207103 (executing program) 2022/09/12 15:23:25 fetching corpus: 3300, signal 183950/207807 (executing program) 2022/09/12 15:23:25 fetching corpus: 3350, signal 184828/208539 (executing program) 2022/09/12 15:23:25 fetching corpus: 3400, signal 185746/209205 (executing program) 2022/09/12 15:23:25 fetching corpus: 3450, signal 186424/209827 (executing program) 2022/09/12 15:23:25 fetching corpus: 3500, signal 187451/210509 (executing program) 2022/09/12 15:23:26 fetching corpus: 3550, signal 188250/211095 (executing program) 2022/09/12 15:23:26 fetching corpus: 3600, signal 189187/211780 (executing program) 2022/09/12 15:23:26 fetching corpus: 3650, signal 189752/212301 (executing program) 2022/09/12 15:23:26 fetching corpus: 3700, signal 190468/212858 (executing program) 2022/09/12 15:23:26 fetching corpus: 3750, signal 191388/213441 (executing program) 2022/09/12 15:23:26 fetching corpus: 3800, signal 192054/213932 (executing program) 2022/09/12 15:23:26 fetching corpus: 3850, signal 193016/214555 (executing program) 2022/09/12 15:23:27 fetching corpus: 3900, signal 193710/215037 (executing program) 2022/09/12 15:23:27 fetching corpus: 3950, signal 194820/215630 (executing program) 2022/09/12 15:23:27 fetching corpus: 4000, signal 195625/216208 (executing program) 2022/09/12 15:23:27 fetching corpus: 4050, signal 196763/216725 (executing program) 2022/09/12 15:23:27 fetching corpus: 4100, signal 197438/217135 (executing program) 2022/09/12 15:23:27 fetching corpus: 4150, signal 197991/217550 (executing program) 2022/09/12 15:23:28 fetching corpus: 4200, signal 198898/217983 (executing program) 2022/09/12 15:23:28 fetching corpus: 4250, signal 199978/218529 (executing program) 2022/09/12 15:23:28 fetching corpus: 4300, signal 200555/218912 (executing program) 2022/09/12 15:23:28 fetching corpus: 4350, signal 201493/219345 (executing program) 2022/09/12 15:23:28 fetching corpus: 4400, signal 202240/219672 (executing program) 2022/09/12 15:23:28 fetching corpus: 4450, signal 203000/220040 (executing program) 2022/09/12 15:23:29 fetching corpus: 4500, signal 204083/220423 (executing program) 2022/09/12 15:23:29 fetching corpus: 4550, signal 204490/220676 (executing program) 2022/09/12 15:23:29 fetching corpus: 4600, signal 205379/220962 (executing program) 2022/09/12 15:23:29 fetching corpus: 4650, signal 206114/221217 (executing program) 2022/09/12 15:23:29 fetching corpus: 4700, signal 207409/221538 (executing program) 2022/09/12 15:23:29 fetching corpus: 4750, signal 208320/221829 (executing program) 2022/09/12 15:23:30 fetching corpus: 4800, signal 208849/222038 (executing program) 2022/09/12 15:23:30 fetching corpus: 4850, signal 209680/222287 (executing program) 2022/09/12 15:23:30 fetching corpus: 4900, signal 210158/222482 (executing program) 2022/09/12 15:23:30 fetching corpus: 4950, signal 210738/222664 (executing program) 2022/09/12 15:23:30 fetching corpus: 5000, signal 211633/222876 (executing program) 2022/09/12 15:23:30 fetching corpus: 5050, signal 212078/223044 (executing program) 2022/09/12 15:23:31 fetching corpus: 5100, signal 212684/223194 (executing program) 2022/09/12 15:23:31 fetching corpus: 5150, signal 213501/223310 (executing program) 2022/09/12 15:23:31 fetching corpus: 5200, signal 214054/223430 (executing program) 2022/09/12 15:23:31 fetching corpus: 5250, signal 214612/223564 (executing program) 2022/09/12 15:23:31 fetching corpus: 5300, signal 215231/223695 (executing program) 2022/09/12 15:23:31 fetching corpus: 5304, signal 215252/223774 (executing program) 2022/09/12 15:23:31 fetching corpus: 5304, signal 215252/223819 (executing program) 2022/09/12 15:23:31 fetching corpus: 5304, signal 215252/223819 (executing program) 2022/09/12 15:23:34 starting 8 fuzzer processes 15:23:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 15:23:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:23:34 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:23:34 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x5d7a, &(0x7f0000000240)={0x0, 0x9c2d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 15:23:34 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) [ 72.567343] audit: type=1400 audit(1662996214.589:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:23:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x6) 15:23:34 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x28, r1, 0xc0822a29f05aae81, 0x0, 0x0, {{0x55}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:23:34 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0), 0x4) [ 73.908655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.910073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.921140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.922192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.928925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.931293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.934405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.934430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.937096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.938650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.939033] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.941167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.943855] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.961076] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.979965] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.985894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.987327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.990177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.992469] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.994008] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.998775] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.002290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.004362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.006056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.008098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.008505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.012156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.013382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.013531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.015992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.016060] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.019123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.019311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.020196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.021308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.022034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.032915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.034162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.034166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.035268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.039195] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.041011] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.048215] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.049482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.051002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.052532] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.054137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.055300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.057252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.058530] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.061073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.065381] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.066168] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.071325] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.092007] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.092838] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.992103] Bluetooth: hci1: command 0x0409 tx timeout [ 75.993329] Bluetooth: hci0: command 0x0409 tx timeout [ 76.055642] Bluetooth: hci7: command 0x0409 tx timeout [ 76.119636] Bluetooth: hci6: command 0x0409 tx timeout [ 76.120265] Bluetooth: hci4: command 0x0409 tx timeout [ 76.120645] Bluetooth: hci3: command 0x0409 tx timeout [ 76.121454] Bluetooth: hci2: command 0x0409 tx timeout [ 76.121979] Bluetooth: hci5: command 0x0409 tx timeout [ 78.039786] Bluetooth: hci0: command 0x041b tx timeout [ 78.041016] Bluetooth: hci1: command 0x041b tx timeout [ 78.103759] Bluetooth: hci7: command 0x041b tx timeout [ 78.167730] Bluetooth: hci5: command 0x041b tx timeout [ 78.168556] Bluetooth: hci2: command 0x041b tx timeout [ 78.169412] Bluetooth: hci3: command 0x041b tx timeout [ 78.172259] Bluetooth: hci4: command 0x041b tx timeout [ 78.173109] Bluetooth: hci6: command 0x041b tx timeout [ 80.087626] Bluetooth: hci1: command 0x040f tx timeout [ 80.088160] Bluetooth: hci0: command 0x040f tx timeout [ 80.151843] Bluetooth: hci7: command 0x040f tx timeout [ 80.215710] Bluetooth: hci6: command 0x040f tx timeout [ 80.216946] Bluetooth: hci4: command 0x040f tx timeout [ 80.220627] Bluetooth: hci3: command 0x040f tx timeout [ 80.222677] Bluetooth: hci2: command 0x040f tx timeout [ 80.224232] Bluetooth: hci5: command 0x040f tx timeout [ 82.135982] Bluetooth: hci0: command 0x0419 tx timeout [ 82.136539] Bluetooth: hci1: command 0x0419 tx timeout [ 82.200151] Bluetooth: hci7: command 0x0419 tx timeout [ 82.263658] Bluetooth: hci5: command 0x0419 tx timeout [ 82.264151] Bluetooth: hci2: command 0x0419 tx timeout [ 82.265625] Bluetooth: hci3: command 0x0419 tx timeout [ 82.266041] Bluetooth: hci4: command 0x0419 tx timeout [ 82.266462] Bluetooth: hci6: command 0x0419 tx timeout 15:24:28 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0), 0x4) 15:24:28 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0), 0x4) 15:24:28 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0), 0x4) 15:24:28 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) [ 126.842467] capability: warning: `syz-executor.6' uses deprecated v2 capabilities in a way that may be insecure 15:24:29 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) 15:24:29 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) 15:24:29 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000580)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400f0}, 0xc) 15:24:29 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="c463fd40d700c4c24d98800000000036f34b0f2d00410fdbaf0000000067660f38f52e8f09e0024d00c4a2b93b51c1c40145dc01450f1b241266420f3a62521009", 0x6, &(0x7f0000000140)="c4813572f461440f74f1363666420f3a17873f4a00000e430fab0c1f450f4dae000810ff8f2978d1ea3e66f6d48f296001116766400fc68d001000000ec7830008000000000080", {[0x7]}}, &(0x7f0000000240)={&(0x7f00000001c0)="2e666744253400c4227932f7c462bd0732c4225d3dfff7f326670f72e20066410f76000f3800f8c4417ee684ea00800000c46251b7fe", 0x0, &(0x7f0000000200)="c42109fa52e0c42249bceb8fa98891dd672ef20f79d526652664660fda6081f30f1bd1c461c816e42e1b07c4236178690dc067f34357"}, 0x8, &(0x7f0000000280)) [ 128.585916] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.860851] audit: type=1400 audit(1662996270.882:7): avc: denied { open } for pid=3939 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.862528] audit: type=1400 audit(1662996270.882:8): avc: denied { kernel } for pid=3939 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.876234] ------------[ cut here ]------------ [ 128.876258] [ 128.876262] ====================================================== [ 128.876266] WARNING: possible circular locking dependency detected [ 128.876270] 6.0.0-rc5-next-20220912 #1 Not tainted [ 128.876277] ------------------------------------------------------ [ 128.876281] syz-executor.1/3940 is trying to acquire lock: [ 128.876287] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.876326] [ 128.876326] but task is already holding lock: [ 128.876329] ffff8880412c3820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.876358] [ 128.876358] which lock already depends on the new lock. [ 128.876358] [ 128.876361] [ 128.876361] the existing dependency chain (in reverse order) is: [ 128.876364] [ 128.876364] -> #3 (&ctx->lock){....}-{2:2}: [ 128.876378] _raw_spin_lock+0x2a/0x40 [ 128.876395] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.876407] __schedule+0xedd/0x2470 [ 128.876417] schedule+0xda/0x1b0 [ 128.876426] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.876448] syscall_exit_to_user_mode+0x19/0x40 [ 128.876466] do_syscall_64+0x48/0x90 [ 128.876479] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.876497] [ 128.876497] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.876511] _raw_spin_lock_nested+0x30/0x40 [ 128.876525] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.876539] task_fork_fair+0x63/0x4d0 [ 128.876559] sched_cgroup_fork+0x3d0/0x540 [ 128.876574] copy_process+0x3f9e/0x6df0 [ 128.876584] kernel_clone+0xe7/0x890 [ 128.876594] user_mode_thread+0xad/0xf0 [ 128.876604] rest_init+0x24/0x250 [ 128.876620] arch_call_rest_init+0xf/0x14 [ 128.876640] start_kernel+0x4c1/0x4e6 [ 128.876656] secondary_startup_64_no_verify+0xe0/0xeb [ 128.876672] [ 128.876672] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.876685] _raw_spin_lock_irqsave+0x39/0x60 [ 128.876700] try_to_wake_up+0xab/0x1920 [ 128.876714] up+0x75/0xb0 [ 128.876725] __up_console_sem+0x6e/0x80 [ 128.876742] console_unlock+0x46a/0x590 [ 128.876758] vt_ioctl+0x2822/0x2ca0 [ 128.876772] tty_ioctl+0x7c4/0x1700 [ 128.876783] __x64_sys_ioctl+0x19a/0x210 [ 128.876799] do_syscall_64+0x3b/0x90 [ 128.876811] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.876828] [ 128.876828] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.876842] __lock_acquire+0x2a02/0x5e70 [ 128.876859] lock_acquire+0x1a2/0x530 [ 128.876875] _raw_spin_lock_irqsave+0x39/0x60 [ 128.876890] down_trylock+0xe/0x70 [ 128.876902] __down_trylock_console_sem+0x3b/0xd0 [ 128.876919] vprintk_emit+0x16b/0x560 [ 128.876936] vprintk+0x84/0xa0 [ 128.876952] _printk+0xba/0xf1 [ 128.876970] report_bug.cold+0x72/0xab [ 128.876982] handle_bug+0x3c/0x70 [ 128.876995] exc_invalid_op+0x14/0x50 [ 128.877008] asm_exc_invalid_op+0x16/0x20 [ 128.877024] group_sched_out.part.0+0x2c7/0x460 [ 128.877034] ctx_sched_out+0x8f1/0xc10 [ 128.877044] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.877057] __schedule+0xedd/0x2470 [ 128.877066] schedule+0xda/0x1b0 [ 128.877075] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.877094] syscall_exit_to_user_mode+0x19/0x40 [ 128.877111] do_syscall_64+0x48/0x90 [ 128.877123] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.877140] [ 128.877140] other info that might help us debug this: [ 128.877140] [ 128.877143] Chain exists of: [ 128.877143] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.877143] [ 128.877158] Possible unsafe locking scenario: [ 128.877158] [ 128.877160] CPU0 CPU1 [ 128.877163] ---- ---- [ 128.877165] lock(&ctx->lock); [ 128.877171] lock(&rq->__lock); [ 128.877177] lock(&ctx->lock); [ 128.877183] lock((console_sem).lock); [ 128.877189] [ 128.877189] *** DEADLOCK *** [ 128.877189] [ 128.877191] 2 locks held by syz-executor.1/3940: [ 128.877198] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.877223] #1: ffff8880412c3820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.877251] [ 128.877251] stack backtrace: [ 128.877254] CPU: 0 PID: 3940 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 128.877267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.877275] Call Trace: [ 128.877278] [ 128.877283] dump_stack_lvl+0x8b/0xb3 [ 128.877297] check_noncircular+0x263/0x2e0 [ 128.877314] ? format_decode+0x26c/0xb50 [ 128.877329] ? print_circular_bug+0x450/0x450 [ 128.877346] ? enable_ptr_key_workfn+0x20/0x20 [ 128.877361] ? format_decode+0x26c/0xb50 [ 128.877376] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.877394] __lock_acquire+0x2a02/0x5e70 [ 128.877416] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.877439] lock_acquire+0x1a2/0x530 [ 128.877456] ? down_trylock+0xe/0x70 [ 128.877471] ? rcu_read_unlock+0x40/0x40 [ 128.877492] ? vprintk+0x84/0xa0 [ 128.877510] _raw_spin_lock_irqsave+0x39/0x60 [ 128.877532] ? down_trylock+0xe/0x70 [ 128.877546] down_trylock+0xe/0x70 [ 128.877559] ? vprintk+0x84/0xa0 [ 128.877577] __down_trylock_console_sem+0x3b/0xd0 [ 128.877594] vprintk_emit+0x16b/0x560 [ 128.877614] vprintk+0x84/0xa0 [ 128.877632] _printk+0xba/0xf1 [ 128.877649] ? record_print_text.cold+0x16/0x16 [ 128.877671] ? report_bug.cold+0x66/0xab [ 128.877685] ? group_sched_out.part.0+0x2c7/0x460 [ 128.877697] report_bug.cold+0x72/0xab [ 128.877711] handle_bug+0x3c/0x70 [ 128.877725] exc_invalid_op+0x14/0x50 [ 128.877739] asm_exc_invalid_op+0x16/0x20 [ 128.877756] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.877770] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.877782] RSP: 0018:ffff888018a37c48 EFLAGS: 00010006 [ 128.877791] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.877798] RDX: ffff8880406b0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.877807] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.877814] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880412c3800 [ 128.877822] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.877833] ? group_sched_out.part.0+0x2c7/0x460 [ 128.877846] ? group_sched_out.part.0+0x2c7/0x460 [ 128.877859] ctx_sched_out+0x8f1/0xc10 [ 128.877872] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.877887] ? lock_is_held_type+0xd7/0x130 [ 128.877906] ? __perf_cgroup_move+0x160/0x160 [ 128.877918] ? set_next_entity+0x304/0x550 [ 128.877936] ? update_curr+0x267/0x740 [ 128.877955] ? lock_is_held_type+0xd7/0x130 [ 128.877973] __schedule+0xedd/0x2470 [ 128.877986] ? io_schedule_timeout+0x150/0x150 [ 128.877998] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.878019] schedule+0xda/0x1b0 [ 128.878030] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.878051] syscall_exit_to_user_mode+0x19/0x40 [ 128.878069] do_syscall_64+0x48/0x90 [ 128.878083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.878100] RIP: 0033:0x7f68f90dfb19 [ 128.878108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.878120] RSP: 002b:00007f68f6655218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.878131] RAX: 0000000000000001 RBX: 00007f68f91f2f68 RCX: 00007f68f90dfb19 [ 128.878138] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f68f91f2f6c [ 128.878146] RBP: 00007f68f91f2f60 R08: 000000000000000e R09: 0000000000000000 [ 128.878153] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f68f91f2f6c [ 128.878160] R13: 00007ffc6c4bc06f R14: 00007f68f6655300 R15: 0000000000022000 [ 128.878173] [ 128.934105] WARNING: CPU: 0 PID: 3940 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.934712] Modules linked in: [ 128.934933] CPU: 0 PID: 3940 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 128.935462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.936198] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.936559] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.937744] RSP: 0018:ffff888018a37c48 EFLAGS: 00010006 [ 128.938097] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.938564] RDX: ffff8880406b0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.939031] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.939498] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880412c3800 [ 128.939968] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.940442] FS: 00007f68f6655700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.940969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.941355] CR2: 00005589e1e3a080 CR3: 00000000183ea000 CR4: 0000000000350ef0 [ 128.941833] Call Trace: [ 128.942013] [ 128.942175] ctx_sched_out+0x8f1/0xc10 [ 128.942442] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.942795] ? lock_is_held_type+0xd7/0x130 [ 128.943093] ? __perf_cgroup_move+0x160/0x160 [ 128.943397] ? set_next_entity+0x304/0x550 [ 128.943693] ? update_curr+0x267/0x740 [ 128.943969] ? lock_is_held_type+0xd7/0x130 [ 128.944267] __schedule+0xedd/0x2470 [ 128.944525] ? io_schedule_timeout+0x150/0x150 [ 128.944838] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.945175] schedule+0xda/0x1b0 [ 128.945412] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.945764] syscall_exit_to_user_mode+0x19/0x40 [ 128.946090] do_syscall_64+0x48/0x90 [ 128.946444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.946964] RIP: 0033:0x7f68f90dfb19 [ 128.947343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.949121] RSP: 002b:00007f68f6655218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.949881] RAX: 0000000000000001 RBX: 00007f68f91f2f68 RCX: 00007f68f90dfb19 [ 128.950588] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f68f91f2f6c [ 128.951284] RBP: 00007f68f91f2f60 R08: 000000000000000e R09: 0000000000000000 [ 128.951987] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f68f91f2f6c [ 128.952676] R13: 00007ffc6c4bc06f R14: 00007f68f6655300 R15: 0000000000022000 [ 128.953379] [ 128.953623] irq event stamp: 652 [ 128.953956] hardirqs last enabled at (651): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.954886] hardirqs last disabled at (652): [] __schedule+0x1225/0x2470 [ 128.955688] softirqs last enabled at (300): [] __irq_exit_rcu+0x11b/0x180 [ 128.956511] softirqs last disabled at (291): [] __irq_exit_rcu+0x11b/0x180 [ 128.957338] ---[ end trace 0000000000000000 ]--- 15:24:32 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x28, r1, 0xc0822a29f05aae81, 0x0, 0x0, {{0x55}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x6) 15:24:32 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 15:24:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:24:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:24:32 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x5d7a, &(0x7f0000000240)={0x0, 0x9c2d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 15:24:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 15:24:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="c463fd40d700c4c24d98800000000036f34b0f2d00410fdbaf0000000067660f38f52e8f09e0024d00c4a2b93b51c1c40145dc01450f1b241266420f3a62521009", 0x6, &(0x7f0000000140)="c4813572f461440f74f1363666420f3a17873f4a00000e430fab0c1f450f4dae000810ff8f2978d1ea3e66f6d48f296001116766400fc68d001000000ec7830008000000000080", {[0x7]}}, &(0x7f0000000240)={&(0x7f00000001c0)="2e666744253400c4227932f7c462bd0732c4225d3dfff7f326670f72e20066410f76000f3800f8c4417ee684ea00800000c46251b7fe", 0x0, &(0x7f0000000200)="c42109fa52e0c42249bceb8fa98891dd672ef20f79d526652664660fda6081f30f1bd1c461c816e42e1b07c4236178690dc067f34357"}, 0x8, &(0x7f0000000280)) [ 130.181015] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:24:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x6) 15:24:32 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 15:24:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:24:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="c463fd40d700c4c24d98800000000036f34b0f2d00410fdbaf0000000067660f38f52e8f09e0024d00c4a2b93b51c1c40145dc01450f1b241266420f3a62521009", 0x6, &(0x7f0000000140)="c4813572f461440f74f1363666420f3a17873f4a00000e430fab0c1f450f4dae000810ff8f2978d1ea3e66f6d48f296001116766400fc68d001000000ec7830008000000000080", {[0x7]}}, &(0x7f0000000240)={&(0x7f00000001c0)="2e666744253400c4227932f7c462bd0732c4225d3dfff7f326670f72e20066410f76000f3800f8c4417ee684ea00800000c46251b7fe", 0x0, &(0x7f0000000200)="c42109fa52e0c42249bceb8fa98891dd672ef20f79d526652664660fda6081f30f1bd1c461c816e42e1b07c4236178690dc067f34357"}, 0x8, &(0x7f0000000280)) [ 130.283098] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:24:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 15:24:32 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x5d7a, &(0x7f0000000240)={0x0, 0x9c2d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 15:24:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:24:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:24:32 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x28, r1, 0xc0822a29f05aae81, 0x0, 0x0, {{0x55}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:24:32 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x5d7a, &(0x7f0000000240)={0x0, 0x9c2d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 15:24:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 15:24:32 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short}, 0x14) 15:24:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x6) 15:24:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="c463fd40d700c4c24d98800000000036f34b0f2d00410fdbaf0000000067660f38f52e8f09e0024d00c4a2b93b51c1c40145dc01450f1b241266420f3a62521009", 0x6, &(0x7f0000000140)="c4813572f461440f74f1363666420f3a17873f4a00000e430fab0c1f450f4dae000810ff8f2978d1ea3e66f6d48f296001116766400fc68d001000000ec7830008000000000080", {[0x7]}}, &(0x7f0000000240)={&(0x7f00000001c0)="2e666744253400c4227932f7c462bd0732c4225d3dfff7f326670f72e20066410f76000f3800f8c4417ee684ea00800000c46251b7fe", 0x0, &(0x7f0000000200)="c42109fa52e0c42249bceb8fa98891dd672ef20f79d526652664660fda6081f30f1bd1c461c816e42e1b07c4236178690dc067f34357"}, 0x8, &(0x7f0000000280)) 15:24:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) [ 130.434288] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:24:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:24:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:24:32 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 15:24:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 15:24:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 15:24:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:24:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:24:32 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 15:24:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a351dd505e2f1a3a8f8f50650fda0a55b6834c95beeb20aa13a6f96f8a9dc17084177fd0abf3cbecf00d64852b7c1529c14fefe1792428d7597677a7dc6340ee"}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="eb", 0x1, r2) 15:24:32 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 15:24:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 15:24:32 executing program 4: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008"], 0x58}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}], 0x2, 0x8080) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0), 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000001300b9ee000000004a880000070000e3c413fa3a3b9526ffc130b49cd64bfd202500000000000000000000000000000000000000000000000000000000000104000000000000", @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000001580), 0x5f}}], 0x2, 0x8080) 15:24:32 executing program 2: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:24:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) 15:24:32 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x28, r1, 0xc0822a29f05aae81, 0x0, 0x0, {{0x55}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:24:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 15:24:32 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 15:24:32 executing program 6: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 4: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 1: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 3: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 2: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:24:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 15:24:32 executing program 7: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 0: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 6: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 0: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 1: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 3: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 4: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:32 executing program 2: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:24:32 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:32 executing program 0: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) [ 131.029311] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.030252] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.030789] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.031276] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 131.031826] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 131.033343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.033828] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.034424] Buffer I/O error on dev sr0, logical block 0, async page read [ 131.036952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.037374] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.038213] Buffer I/O error on dev sr0, logical block 1, async page read [ 131.039187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.039789] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.040344] Buffer I/O error on dev sr0, logical block 2, async page read [ 131.041295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.041891] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.042545] Buffer I/O error on dev sr0, logical block 3, async page read [ 131.043390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.043875] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.044657] Buffer I/O error on dev sr0, logical block 4, async page read [ 131.045460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.045855] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.046396] Buffer I/O error on dev sr0, logical block 5, async page read [ 131.047101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.047465] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.048017] Buffer I/O error on dev sr0, logical block 6, async page read [ 131.048773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.049138] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.049710] Buffer I/O error on dev sr0, logical block 7, async page read [ 131.050507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.050906] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.051447] Buffer I/O error on dev sr0, logical block 0, async page read [ 131.052132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.052495] Buffer I/O error on dev sr0, logical block 1, async page read [ 131.053237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.053839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.054388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.054983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.055517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.056134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.056770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.057329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.057979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.059200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.062026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.062733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.063287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.063958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.147248] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.147956] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.148414] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.148884] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 131.149949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.150522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.151012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.151447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.151955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.152401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.152924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.153339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:24:33 executing program 7: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:33 executing program 6: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:33 executing program 1: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:33 executing program 4: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:33 executing program 2: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:24:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80044501, &(0x7f0000000000)=""/156) 15:24:33 executing program 3: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 7: r0 = semget$private(0x0, 0x2, 0x200) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/15) r1 = semget$private(0x0, 0x2, 0x8) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x551b02ed) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/116) semtimedop(r1, &(0x7f0000000100)=[{0x2, 0x9, 0x1000}, {0x3, 0x7, 0x800}], 0x2, &(0x7f0000000140)={0x0, 0x989680}) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000180)=""/27) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x2}, {0x4, 0x6, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={0x0, 0x989680}) semop(r0, &(0x7f0000000240)=[{0x4, 0x1}, {0x4, 0x4, 0xc00}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6260, 0x7]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 15:24:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80044501, &(0x7f0000000000)=""/156) [ 131.361178] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.362055] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.362512] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.362969] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 131.389201] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.389884] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.390341] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.390803] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 131.391873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.392513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.393818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.394379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.395098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.396177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.396791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.397364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.429125] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.429871] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.430341] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.430868] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 131.450174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.450821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.451354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.452760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.453285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.454050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.456740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.457264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:24:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x201100a0}, 0xc) 15:24:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f0000000d00)) 15:24:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80044501, &(0x7f0000000000)=""/156) 15:24:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 15:24:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 15:24:33 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 15:24:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 15:24:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80044501, &(0x7f0000000000)=""/156) 15:24:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 15:24:33 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) [ 131.642042] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.642845] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.643315] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.643768] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 15:24:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) [ 131.680527] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.681757] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.682254] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.682755] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 131.683737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.685820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.686356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.687057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.687612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.688196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.689124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.689892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:24:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 15:24:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:33 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 15:24:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 15:24:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ftruncate(r1, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) finit_module(r0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e) syz_io_uring_setup(0x6546, &(0x7f00000031c0)={0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 15:24:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 15:24:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:33 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) [ 131.934762] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.936860] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.937907] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.938876] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 131.940850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.941463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.942078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.942663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.943252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.944116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.944729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.945322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.946033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.946659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.947254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.947868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.948430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.949016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.949630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.950196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.950839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.951386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.952004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.952578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.953181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.953783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.954377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.954952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.955591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.956159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.956812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.957390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.958043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.958685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.959783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.960427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.961288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.961888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.962417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.962977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.963497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.964063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.964666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 131.965232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.014575] hrtimer: interrupt took 19616 ns 15:24:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 132.101315] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.102730] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.104245] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present 15:24:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 132.105226] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 132.107304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.107884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.108446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.109110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.109688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.110228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.110932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.111450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.112109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.112782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.113332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.113871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.114416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.114991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.115517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.116063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.116671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.117188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.117787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.118316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.118897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.119413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.119964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.120480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.121119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.121818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.122348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.122897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.123425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.124015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.124676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.125243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.125922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.128754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.129315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.131993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.132594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.133155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.135800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.136397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:24:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:34 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000000300)={[{@resuid}]}) 15:24:34 executing program 2: syz_mount_image$nfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[{'\x05\x00\x00\x00'}]}) [ 132.472618] EXT4-fs (sda): re-mounted. Quota mode: none. [ 132.482522] EXT4-fs (sda): re-mounted. Quota mode: none. 15:24:34 executing program 2: syz_mount_image$nfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[{'\x05\x00\x00\x00'}]}) 15:24:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:34 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ssrr={0x89, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x0, 0xc, "c658043fc73b58624bd4"}, @noop, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {}]}]}}}}}}}, 0x0) 15:24:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1829]}, 0x0, 0x8) sendmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000000300)={[{@resuid}]}) 15:24:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 15:24:34 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ssrr={0x89, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x0, 0xc, "c658043fc73b58624bd4"}, @noop, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {}]}]}}}}}}}, 0x0) [ 132.579148] EXT4-fs (sda): re-mounted. Quota mode: none. 15:24:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000000300)={[{@resuid}]}) [ 132.628097] audit: type=1326 audit(1662996274.650:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4240 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82c4ecb19 code=0x0 15:24:34 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:34 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:34 executing program 2: syz_mount_image$nfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[{'\x05\x00\x00\x00'}]}) 15:24:34 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ssrr={0x89, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x0, 0xc, "c658043fc73b58624bd4"}, @noop, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {}]}]}}}}}}}, 0x0) [ 132.669614] EXT4-fs (sda): re-mounted. Quota mode: none. 15:24:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28, &(0x7f0000000300)={[{@resuid}]}) [ 132.750536] EXT4-fs (sda): re-mounted. Quota mode: none. 15:24:34 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ssrr={0x89, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x0, 0xc, "c658043fc73b58624bd4"}, @noop, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {}]}]}}}}}}}, 0x0) 15:24:34 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) 15:24:34 executing program 2: syz_mount_image$nfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[{'\x05\x00\x00\x00'}]}) 15:24:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 132.992438] audit: type=1326 audit(1662996275.014:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4261 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82c4ecb19 code=0x0 15:24:35 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:35 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:35 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0) 15:24:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 15:24:35 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:35 executing program 5: write$nbd(0xffffffffffffffff, 0x0, 0x0) 15:24:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 15:24:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 15:24:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 15:24:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) [ 133.167220] loop1: detected capacity change from 0 to 256 [ 133.173172] audit: type=1326 audit(1662996275.192:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4282 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82c4ecb19 code=0x0 [ 133.180375] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 133.235391] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:35 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) 15:24:35 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="4a4036f40a11dc1d20c8ee63d0fcd058fba132d1292b3bee4f786a29fdb6b2e2a93656ba6dc8cfa4c9c7653cd54c33d9c3c8e1f320c06e6e941c182cd113d561b608535a00f291712e3e4f6f7a18f4fdcec26d59b3927b2c90990dacc3a19948b5f557f6b205e0e63297099ab1f4cb6faabca57539414d2b419a38c3742f4cc226301d85111c2dfc9277757e6daabf76dacf26a9b798fe52fdd7f8c28e80297f0a7572611b1f948e3c391a866c66703f12b73f22ecf255a5482c028bc32c02b3163692c96845cfcf0c32e292f0f50c607cc19edcb484192379e4eb0e677fcc36144a4fa3abbe138d2165064672ee184d47bf016b207654a7c39f289effe5401dc7404044412f28fc24b5837bc7da4866a65004b04cfd60dcee84c6c72f8a233df526f8ef8811996d190000000000"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:35 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)=')', 0x1}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8440}, {}, {0xffffffffffffffff, 0x20}], 0x3, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/mipi-dsi', 0x20200, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x400000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x0, 0x12, 0x3, 0x0, 0x37, 0xc010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdd}, 0x1892, 0xffffffffb76edb1d, 0x200, 0x2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 15:24:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 15:24:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 15:24:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 15:24:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) [ 133.335822] audit: type=1326 audit(1662996275.358:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82c4ecb19 code=0x0 [ 133.338812] loop1: detected capacity change from 0 to 256 [ 133.345972] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 133.411170] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:24:36 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 15:24:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) 15:24:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001300)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 15:24:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) [ 134.073056] loop1: detected capacity change from 0 to 256 15:24:36 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:24:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000003c0)) 15:24:36 executing program 4 VM DIAGNOSIS: 15:24:31 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888018a37698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f68f6655700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005589e1e3a080 CR3=00000000183ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f68f91c67c0 00007f68f91c67c8 YMM02=0000000000000000 0000000000000000 00007f68f91c67e0 00007f68f91c67c0 YMM03=0000000000000000 0000000000000000 00007f68f91c67c8 00007f68f91c67c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff8178407f RBX=ffffffff85bb7364 RCX=ffffffff8178404d RDX=0000000000000000 RSI=ffffffff85ed8ef2 RDI=ffffffff85bb7354 RBP=ffffffff85bb7354 RSP=ffff88802283f460 R8 =ffffffff85ed8ef2 R9 =ffffffff85edfa00 R10=ffffed1004507eb2 R11=000000000003603d R12=ffffffff85bb7360 R13=ffffffff85bb7354 R14=ffffffff85bb7354 R15=dffffc0000000000 RIP=ffffffff8111ac9f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f61d37b3368 CR3=0000000041558000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000