Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:22899' (ECDSA) to the list of known hosts. 2022/09/12 20:08:47 fuzzer started 2022/09/12 20:08:47 dialing manager at localhost:38027 syzkaller login: [ 35.907516] cgroup: Unknown subsys name 'net' [ 36.045178] cgroup: Unknown subsys name 'rlimit' 2022/09/12 20:09:01 syscalls: 2215 2022/09/12 20:09:01 code coverage: enabled 2022/09/12 20:09:01 comparison tracing: enabled 2022/09/12 20:09:01 extra coverage: enabled 2022/09/12 20:09:01 setuid sandbox: enabled 2022/09/12 20:09:01 namespace sandbox: enabled 2022/09/12 20:09:01 Android sandbox: enabled 2022/09/12 20:09:01 fault injection: enabled 2022/09/12 20:09:01 leak checking: enabled 2022/09/12 20:09:01 net packet injection: enabled 2022/09/12 20:09:01 net device setup: enabled 2022/09/12 20:09:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 20:09:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 20:09:01 USB emulation: enabled 2022/09/12 20:09:01 hci packet injection: enabled 2022/09/12 20:09:01 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 20:09:01 802.15.4 emulation: enabled 2022/09/12 20:09:01 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 20:09:01 fetching corpus: 50, signal 32986/36544 (executing program) 2022/09/12 20:09:02 fetching corpus: 100, signal 48165/53198 (executing program) 2022/09/12 20:09:02 fetching corpus: 150, signal 57039/63501 (executing program) 2022/09/12 20:09:02 fetching corpus: 200, signal 63932/71783 (executing program) 2022/09/12 20:09:02 fetching corpus: 250, signal 72599/81683 (executing program) 2022/09/12 20:09:02 fetching corpus: 300, signal 77783/88100 (executing program) 2022/09/12 20:09:02 fetching corpus: 350, signal 83956/95426 (executing program) 2022/09/12 20:09:02 fetching corpus: 400, signal 90053/102533 (executing program) 2022/09/12 20:09:03 fetching corpus: 450, signal 95205/108755 (executing program) 2022/09/12 20:09:03 fetching corpus: 500, signal 99117/113712 (executing program) 2022/09/12 20:09:03 fetching corpus: 550, signal 102697/118335 (executing program) 2022/09/12 20:09:03 fetching corpus: 600, signal 105993/122647 (executing program) 2022/09/12 20:09:03 fetching corpus: 650, signal 110197/127700 (executing program) 2022/09/12 20:09:03 fetching corpus: 700, signal 113845/132235 (executing program) 2022/09/12 20:09:03 fetching corpus: 750, signal 116486/135884 (executing program) 2022/09/12 20:09:04 fetching corpus: 800, signal 119434/139776 (executing program) 2022/09/12 20:09:04 fetching corpus: 850, signal 122375/143615 (executing program) 2022/09/12 20:09:04 fetching corpus: 900, signal 126880/148719 (executing program) 2022/09/12 20:09:04 fetching corpus: 950, signal 128805/151536 (executing program) 2022/09/12 20:09:04 fetching corpus: 1000, signal 131570/155081 (executing program) 2022/09/12 20:09:04 fetching corpus: 1050, signal 134135/158394 (executing program) 2022/09/12 20:09:04 fetching corpus: 1100, signal 136062/161093 (executing program) 2022/09/12 20:09:05 fetching corpus: 1150, signal 137831/163696 (executing program) 2022/09/12 20:09:05 fetching corpus: 1200, signal 140555/167017 (executing program) 2022/09/12 20:09:05 fetching corpus: 1250, signal 142352/169564 (executing program) 2022/09/12 20:09:05 fetching corpus: 1300, signal 145518/173202 (executing program) 2022/09/12 20:09:05 fetching corpus: 1350, signal 147959/176271 (executing program) 2022/09/12 20:09:05 fetching corpus: 1400, signal 149992/178897 (executing program) 2022/09/12 20:09:05 fetching corpus: 1450, signal 152256/181703 (executing program) 2022/09/12 20:09:06 fetching corpus: 1500, signal 154146/184198 (executing program) 2022/09/12 20:09:06 fetching corpus: 1550, signal 156253/186867 (executing program) 2022/09/12 20:09:06 fetching corpus: 1600, signal 157673/188957 (executing program) 2022/09/12 20:09:06 fetching corpus: 1650, signal 158997/190928 (executing program) 2022/09/12 20:09:06 fetching corpus: 1700, signal 160311/192976 (executing program) 2022/09/12 20:09:06 fetching corpus: 1750, signal 162057/195227 (executing program) 2022/09/12 20:09:06 fetching corpus: 1800, signal 163369/197173 (executing program) 2022/09/12 20:09:07 fetching corpus: 1850, signal 164625/199015 (executing program) 2022/09/12 20:09:07 fetching corpus: 1900, signal 165933/200836 (executing program) 2022/09/12 20:09:07 fetching corpus: 1950, signal 167752/203087 (executing program) 2022/09/12 20:09:07 fetching corpus: 2000, signal 169027/204889 (executing program) 2022/09/12 20:09:07 fetching corpus: 2050, signal 170354/206742 (executing program) 2022/09/12 20:09:07 fetching corpus: 2100, signal 171943/208750 (executing program) 2022/09/12 20:09:07 fetching corpus: 2150, signal 173089/210408 (executing program) 2022/09/12 20:09:08 fetching corpus: 2200, signal 175034/212593 (executing program) 2022/09/12 20:09:08 fetching corpus: 2250, signal 176994/214799 (executing program) 2022/09/12 20:09:08 fetching corpus: 2300, signal 178137/216376 (executing program) 2022/09/12 20:09:08 fetching corpus: 2350, signal 179475/218016 (executing program) 2022/09/12 20:09:08 fetching corpus: 2400, signal 180240/219334 (executing program) 2022/09/12 20:09:08 fetching corpus: 2450, signal 181651/221041 (executing program) 2022/09/12 20:09:08 fetching corpus: 2500, signal 183621/223152 (executing program) 2022/09/12 20:09:09 fetching corpus: 2550, signal 184819/224673 (executing program) 2022/09/12 20:09:09 fetching corpus: 2600, signal 185423/225805 (executing program) 2022/09/12 20:09:09 fetching corpus: 2650, signal 186317/227159 (executing program) 2022/09/12 20:09:09 fetching corpus: 2700, signal 187282/228492 (executing program) 2022/09/12 20:09:09 fetching corpus: 2750, signal 187905/229596 (executing program) 2022/09/12 20:09:09 fetching corpus: 2800, signal 189447/231284 (executing program) 2022/09/12 20:09:09 fetching corpus: 2850, signal 190673/232813 (executing program) 2022/09/12 20:09:09 fetching corpus: 2900, signal 191858/234278 (executing program) 2022/09/12 20:09:10 fetching corpus: 2950, signal 192831/235499 (executing program) 2022/09/12 20:09:10 fetching corpus: 3000, signal 193716/236712 (executing program) 2022/09/12 20:09:10 fetching corpus: 3050, signal 194506/237852 (executing program) 2022/09/12 20:09:10 fetching corpus: 3100, signal 195980/239451 (executing program) 2022/09/12 20:09:10 fetching corpus: 3150, signal 197075/240854 (executing program) 2022/09/12 20:09:10 fetching corpus: 3200, signal 198311/242257 (executing program) 2022/09/12 20:09:11 fetching corpus: 3250, signal 199484/243554 (executing program) 2022/09/12 20:09:11 fetching corpus: 3300, signal 200490/244802 (executing program) 2022/09/12 20:09:11 fetching corpus: 3350, signal 201178/245810 (executing program) 2022/09/12 20:09:11 fetching corpus: 3400, signal 202222/247043 (executing program) 2022/09/12 20:09:11 fetching corpus: 3450, signal 203174/248198 (executing program) 2022/09/12 20:09:11 fetching corpus: 3500, signal 204383/249504 (executing program) 2022/09/12 20:09:11 fetching corpus: 3550, signal 205212/250592 (executing program) 2022/09/12 20:09:11 fetching corpus: 3600, signal 206054/251744 (executing program) 2022/09/12 20:09:12 fetching corpus: 3650, signal 206607/252668 (executing program) 2022/09/12 20:09:12 fetching corpus: 3700, signal 207764/253872 (executing program) 2022/09/12 20:09:12 fetching corpus: 3750, signal 209017/255082 (executing program) 2022/09/12 20:09:12 fetching corpus: 3800, signal 209899/256122 (executing program) 2022/09/12 20:09:12 fetching corpus: 3850, signal 210678/257101 (executing program) 2022/09/12 20:09:12 fetching corpus: 3900, signal 211507/258064 (executing program) 2022/09/12 20:09:12 fetching corpus: 3950, signal 212691/259242 (executing program) 2022/09/12 20:09:13 fetching corpus: 4000, signal 213663/260260 (executing program) 2022/09/12 20:09:13 fetching corpus: 4050, signal 214874/261406 (executing program) 2022/09/12 20:09:13 fetching corpus: 4100, signal 215605/262322 (executing program) 2022/09/12 20:09:13 fetching corpus: 4150, signal 216435/263228 (executing program) 2022/09/12 20:09:13 fetching corpus: 4200, signal 217150/264114 (executing program) 2022/09/12 20:09:13 fetching corpus: 4250, signal 217676/264918 (executing program) 2022/09/12 20:09:13 fetching corpus: 4300, signal 218208/265702 (executing program) 2022/09/12 20:09:14 fetching corpus: 4350, signal 218848/266510 (executing program) 2022/09/12 20:09:14 fetching corpus: 4400, signal 219511/267329 (executing program) 2022/09/12 20:09:14 fetching corpus: 4450, signal 220391/268216 (executing program) 2022/09/12 20:09:14 fetching corpus: 4500, signal 220942/268963 (executing program) 2022/09/12 20:09:14 fetching corpus: 4550, signal 221802/269889 (executing program) 2022/09/12 20:09:14 fetching corpus: 4600, signal 223041/270875 (executing program) 2022/09/12 20:09:14 fetching corpus: 4650, signal 224160/271801 (executing program) 2022/09/12 20:09:15 fetching corpus: 4700, signal 225038/272657 (executing program) 2022/09/12 20:09:15 fetching corpus: 4750, signal 226011/273606 (executing program) 2022/09/12 20:09:15 fetching corpus: 4800, signal 226924/274454 (executing program) 2022/09/12 20:09:15 fetching corpus: 4850, signal 227471/275142 (executing program) 2022/09/12 20:09:15 fetching corpus: 4900, signal 228147/275874 (executing program) 2022/09/12 20:09:15 fetching corpus: 4950, signal 229287/276754 (executing program) 2022/09/12 20:09:15 fetching corpus: 5000, signal 229843/277444 (executing program) 2022/09/12 20:09:16 fetching corpus: 5050, signal 230549/278121 (executing program) 2022/09/12 20:09:16 fetching corpus: 5100, signal 231430/278880 (executing program) 2022/09/12 20:09:16 fetching corpus: 5150, signal 231965/279515 (executing program) 2022/09/12 20:09:16 fetching corpus: 5200, signal 232348/280100 (executing program) 2022/09/12 20:09:16 fetching corpus: 5250, signal 232926/280768 (executing program) 2022/09/12 20:09:16 fetching corpus: 5300, signal 233674/281394 (executing program) 2022/09/12 20:09:16 fetching corpus: 5350, signal 234387/282076 (executing program) 2022/09/12 20:09:16 fetching corpus: 5400, signal 234857/282661 (executing program) 2022/09/12 20:09:17 fetching corpus: 5450, signal 235626/283261 (executing program) 2022/09/12 20:09:17 fetching corpus: 5500, signal 236314/283912 (executing program) 2022/09/12 20:09:17 fetching corpus: 5550, signal 237003/284539 (executing program) 2022/09/12 20:09:17 fetching corpus: 5600, signal 237770/285164 (executing program) 2022/09/12 20:09:17 fetching corpus: 5650, signal 238652/285827 (executing program) 2022/09/12 20:09:17 fetching corpus: 5700, signal 239284/286377 (executing program) 2022/09/12 20:09:17 fetching corpus: 5750, signal 239867/286942 (executing program) 2022/09/12 20:09:17 fetching corpus: 5800, signal 240353/287464 (executing program) 2022/09/12 20:09:17 fetching corpus: 5850, signal 241085/288020 (executing program) 2022/09/12 20:09:18 fetching corpus: 5900, signal 241672/288531 (executing program) 2022/09/12 20:09:18 fetching corpus: 5950, signal 242630/289121 (executing program) 2022/09/12 20:09:18 fetching corpus: 6000, signal 243145/289629 (executing program) 2022/09/12 20:09:18 fetching corpus: 6050, signal 244330/290255 (executing program) 2022/09/12 20:09:18 fetching corpus: 6100, signal 244856/290732 (executing program) 2022/09/12 20:09:18 fetching corpus: 6150, signal 245516/291226 (executing program) 2022/09/12 20:09:19 fetching corpus: 6200, signal 246038/291643 (executing program) 2022/09/12 20:09:19 fetching corpus: 6250, signal 246636/292113 (executing program) 2022/09/12 20:09:19 fetching corpus: 6300, signal 247439/292582 (executing program) 2022/09/12 20:09:19 fetching corpus: 6350, signal 248546/293092 (executing program) 2022/09/12 20:09:19 fetching corpus: 6400, signal 249067/293549 (executing program) 2022/09/12 20:09:19 fetching corpus: 6450, signal 249808/294053 (executing program) 2022/09/12 20:09:20 fetching corpus: 6500, signal 250329/294499 (executing program) 2022/09/12 20:09:20 fetching corpus: 6550, signal 250968/294934 (executing program) 2022/09/12 20:09:20 fetching corpus: 6600, signal 251492/295356 (executing program) 2022/09/12 20:09:20 fetching corpus: 6650, signal 251886/295762 (executing program) 2022/09/12 20:09:20 fetching corpus: 6700, signal 252254/296135 (executing program) 2022/09/12 20:09:20 fetching corpus: 6750, signal 252789/296510 (executing program) 2022/09/12 20:09:20 fetching corpus: 6800, signal 253331/296862 (executing program) 2022/09/12 20:09:20 fetching corpus: 6850, signal 253685/297213 (executing program) 2022/09/12 20:09:21 fetching corpus: 6900, signal 254182/297589 (executing program) 2022/09/12 20:09:21 fetching corpus: 6950, signal 254758/297966 (executing program) 2022/09/12 20:09:21 fetching corpus: 7000, signal 255267/298277 (executing program) 2022/09/12 20:09:21 fetching corpus: 7050, signal 256031/298602 (executing program) 2022/09/12 20:09:21 fetching corpus: 7100, signal 256471/298928 (executing program) 2022/09/12 20:09:21 fetching corpus: 7150, signal 256961/299244 (executing program) 2022/09/12 20:09:21 fetching corpus: 7200, signal 257598/299571 (executing program) 2022/09/12 20:09:22 fetching corpus: 7250, signal 257985/299869 (executing program) 2022/09/12 20:09:22 fetching corpus: 7300, signal 258522/300000 (executing program) 2022/09/12 20:09:22 fetching corpus: 7350, signal 259081/300022 (executing program) 2022/09/12 20:09:22 fetching corpus: 7400, signal 259439/300054 (executing program) 2022/09/12 20:09:22 fetching corpus: 7450, signal 259703/300055 (executing program) 2022/09/12 20:09:22 fetching corpus: 7500, signal 260626/300068 (executing program) 2022/09/12 20:09:22 fetching corpus: 7550, signal 261030/300113 (executing program) 2022/09/12 20:09:23 fetching corpus: 7600, signal 261609/300194 (executing program) 2022/09/12 20:09:23 fetching corpus: 7650, signal 262227/300205 (executing program) 2022/09/12 20:09:23 fetching corpus: 7700, signal 262619/300240 (executing program) 2022/09/12 20:09:23 fetching corpus: 7750, signal 263077/300244 (executing program) 2022/09/12 20:09:23 fetching corpus: 7800, signal 263523/300257 (executing program) 2022/09/12 20:09:23 fetching corpus: 7850, signal 263821/300263 (executing program) 2022/09/12 20:09:23 fetching corpus: 7900, signal 264195/300286 (executing program) 2022/09/12 20:09:24 fetching corpus: 7950, signal 264741/300288 (executing program) 2022/09/12 20:09:24 fetching corpus: 8000, signal 265033/300290 (executing program) 2022/09/12 20:09:24 fetching corpus: 8050, signal 265527/300293 (executing program) 2022/09/12 20:09:24 fetching corpus: 8100, signal 265944/300299 (executing program) 2022/09/12 20:09:24 fetching corpus: 8150, signal 266396/300316 (executing program) 2022/09/12 20:09:24 fetching corpus: 8200, signal 266832/300326 (executing program) 2022/09/12 20:09:24 fetching corpus: 8250, signal 267514/300337 (executing program) 2022/09/12 20:09:24 fetching corpus: 8300, signal 268046/300354 (executing program) 2022/09/12 20:09:25 fetching corpus: 8350, signal 268506/300359 (executing program) 2022/09/12 20:09:25 fetching corpus: 8400, signal 268909/300384 (executing program) 2022/09/12 20:09:25 fetching corpus: 8450, signal 269331/300393 (executing program) 2022/09/12 20:09:25 fetching corpus: 8500, signal 269916/300418 (executing program) 2022/09/12 20:09:25 fetching corpus: 8550, signal 270262/300422 (executing program) 2022/09/12 20:09:25 fetching corpus: 8600, signal 270560/300438 (executing program) 2022/09/12 20:09:25 fetching corpus: 8650, signal 270912/300440 (executing program) 2022/09/12 20:09:26 fetching corpus: 8700, signal 271229/300452 (executing program) 2022/09/12 20:09:26 fetching corpus: 8750, signal 271577/300459 (executing program) 2022/09/12 20:09:26 fetching corpus: 8800, signal 271946/300465 (executing program) 2022/09/12 20:09:26 fetching corpus: 8850, signal 272291/300469 (executing program) 2022/09/12 20:09:26 fetching corpus: 8900, signal 272723/300475 (executing program) 2022/09/12 20:09:26 fetching corpus: 8950, signal 273052/300483 (executing program) 2022/09/12 20:09:26 fetching corpus: 9000, signal 273458/300553 (executing program) 2022/09/12 20:09:26 fetching corpus: 9050, signal 273990/300560 (executing program) 2022/09/12 20:09:27 fetching corpus: 9100, signal 274504/300568 (executing program) 2022/09/12 20:09:27 fetching corpus: 9150, signal 274886/300570 (executing program) 2022/09/12 20:09:27 fetching corpus: 9200, signal 275211/300581 (executing program) 2022/09/12 20:09:27 fetching corpus: 9250, signal 275664/300587 (executing program) 2022/09/12 20:09:27 fetching corpus: 9300, signal 275980/300594 (executing program) 2022/09/12 20:09:27 fetching corpus: 9350, signal 276431/300653 (executing program) 2022/09/12 20:09:27 fetching corpus: 9400, signal 276706/300671 (executing program) 2022/09/12 20:09:27 fetching corpus: 9450, signal 277098/300676 (executing program) 2022/09/12 20:09:28 fetching corpus: 9500, signal 277746/300701 (executing program) 2022/09/12 20:09:28 fetching corpus: 9550, signal 278132/300705 (executing program) 2022/09/12 20:09:28 fetching corpus: 9600, signal 278540/300713 (executing program) 2022/09/12 20:09:28 fetching corpus: 9650, signal 278994/300725 (executing program) 2022/09/12 20:09:28 fetching corpus: 9700, signal 279528/300733 (executing program) 2022/09/12 20:09:28 fetching corpus: 9750, signal 279904/300733 (executing program) 2022/09/12 20:09:29 fetching corpus: 9800, signal 280251/300741 (executing program) 2022/09/12 20:09:29 fetching corpus: 9850, signal 280722/300749 (executing program) 2022/09/12 20:09:29 fetching corpus: 9900, signal 281114/300774 (executing program) 2022/09/12 20:09:29 fetching corpus: 9950, signal 281602/300774 (executing program) 2022/09/12 20:09:29 fetching corpus: 10000, signal 281807/300790 (executing program) 2022/09/12 20:09:29 fetching corpus: 10050, signal 282012/300790 (executing program) 2022/09/12 20:09:29 fetching corpus: 10100, signal 282360/300796 (executing program) 2022/09/12 20:09:30 fetching corpus: 10150, signal 282688/300814 (executing program) 2022/09/12 20:09:30 fetching corpus: 10200, signal 282980/300845 (executing program) 2022/09/12 20:09:30 fetching corpus: 10250, signal 283404/300939 (executing program) 2022/09/12 20:09:30 fetching corpus: 10300, signal 283933/301015 (executing program) 2022/09/12 20:09:30 fetching corpus: 10350, signal 284378/301017 (executing program) 2022/09/12 20:09:30 fetching corpus: 10400, signal 284766/301022 (executing program) 2022/09/12 20:09:30 fetching corpus: 10450, signal 285108/301041 (executing program) 2022/09/12 20:09:31 fetching corpus: 10500, signal 285359/301050 (executing program) 2022/09/12 20:09:31 fetching corpus: 10550, signal 285803/301064 (executing program) 2022/09/12 20:09:31 fetching corpus: 10600, signal 286134/301064 (executing program) 2022/09/12 20:09:31 fetching corpus: 10650, signal 286567/301064 (executing program) 2022/09/12 20:09:31 fetching corpus: 10700, signal 287052/301065 (executing program) 2022/09/12 20:09:31 fetching corpus: 10750, signal 287429/301065 (executing program) 2022/09/12 20:09:32 fetching corpus: 10800, signal 287630/301066 (executing program) 2022/09/12 20:09:32 fetching corpus: 10850, signal 287917/301079 (executing program) 2022/09/12 20:09:32 fetching corpus: 10900, signal 288191/301086 (executing program) 2022/09/12 20:09:32 fetching corpus: 10950, signal 288525/301095 (executing program) 2022/09/12 20:09:32 fetching corpus: 11000, signal 289144/301106 (executing program) 2022/09/12 20:09:32 fetching corpus: 11035, signal 289386/301113 (executing program) 2022/09/12 20:09:32 fetching corpus: 11035, signal 289386/301113 (executing program) 2022/09/12 20:09:34 starting 8 fuzzer processes 20:09:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 20:09:35 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:09:35 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), 0xffffffffffffffff) 20:09:35 executing program 4: timer_create(0x8, &(0x7f00000000c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) 20:09:35 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa) [ 83.198853] audit: type=1400 audit(1663013375.034:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:09:35 executing program 5: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x0) 20:09:35 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) 20:09:35 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f00000016c0), 0x6, 0x0) inotify_add_watch(r0, 0x0, 0x81000094) [ 84.452894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.461215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.477459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.478765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.480525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.482205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.485265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.487092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.489242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.491884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.498386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.506976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.511530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.513054] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.517400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.518998] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.520421] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.521866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.523580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.525001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.526226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.528251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.529643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.531018] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.535353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.536954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.538894] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.540048] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.541830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.542934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.544139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.546869] Bluetooth: hci1: HCI_REQ-0x0c1a [ 84.547027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.554572] Bluetooth: hci0: HCI_REQ-0x0c1a [ 84.559885] Bluetooth: hci3: HCI_REQ-0x0c1a [ 84.561626] Bluetooth: hci2: HCI_REQ-0x0c1a [ 84.570658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.575894] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.578446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.587847] Bluetooth: hci4: HCI_REQ-0x0c1a [ 84.594596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.596606] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.601101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.609437] Bluetooth: hci5: HCI_REQ-0x0c1a [ 84.614083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.617952] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.624979] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.626530] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.631266] Bluetooth: hci6: HCI_REQ-0x0c1a [ 86.603457] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 86.603822] Bluetooth: hci4: command 0x0409 tx timeout [ 86.604436] Bluetooth: hci1: command 0x0409 tx timeout [ 86.604625] Bluetooth: hci0: command 0x0409 tx timeout [ 86.605451] Bluetooth: hci2: command 0x0409 tx timeout [ 86.605892] Bluetooth: hci3: command 0x0409 tx timeout [ 86.666812] Bluetooth: hci6: command 0x0409 tx timeout [ 86.666823] Bluetooth: hci5: command 0x0409 tx timeout [ 88.651358] Bluetooth: hci3: command 0x041b tx timeout [ 88.651771] Bluetooth: hci0: command 0x041b tx timeout [ 88.651877] Bluetooth: hci2: command 0x041b tx timeout [ 88.652779] Bluetooth: hci1: command 0x041b tx timeout [ 88.653896] Bluetooth: hci4: command 0x041b tx timeout [ 88.714767] Bluetooth: hci6: command 0x041b tx timeout [ 88.715788] Bluetooth: hci5: command 0x041b tx timeout [ 89.748616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.749617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.756974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.759595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.790575] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.792559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.795793] Bluetooth: hci7: HCI_REQ-0x0c1a [ 90.698850] Bluetooth: hci4: command 0x040f tx timeout [ 90.699375] Bluetooth: hci1: command 0x040f tx timeout [ 90.699786] Bluetooth: hci0: command 0x040f tx timeout [ 90.700266] Bluetooth: hci2: command 0x040f tx timeout [ 90.700273] Bluetooth: hci3: command 0x040f tx timeout [ 90.762775] Bluetooth: hci5: command 0x040f tx timeout [ 90.763253] Bluetooth: hci6: command 0x040f tx timeout [ 91.850811] Bluetooth: hci7: command 0x0409 tx timeout [ 92.746773] Bluetooth: hci3: command 0x0419 tx timeout [ 92.746790] Bluetooth: hci2: command 0x0419 tx timeout [ 92.747681] Bluetooth: hci0: command 0x0419 tx timeout [ 92.748608] Bluetooth: hci1: command 0x0419 tx timeout [ 92.749649] Bluetooth: hci4: command 0x0419 tx timeout [ 92.811762] Bluetooth: hci6: command 0x0419 tx timeout [ 92.812266] Bluetooth: hci5: command 0x0419 tx timeout [ 93.898766] Bluetooth: hci7: command 0x041b tx timeout [ 95.947809] Bluetooth: hci7: command 0x040f tx timeout [ 97.995766] Bluetooth: hci7: command 0x0419 tx timeout [ 133.467142] audit: type=1400 audit(1663013425.303:7): avc: denied { open } for pid=3840 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.468907] audit: type=1400 audit(1663013425.303:8): avc: denied { kernel } for pid=3840 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.487833] ------------[ cut here ]------------ [ 133.487854] [ 133.487858] ====================================================== [ 133.487861] WARNING: possible circular locking dependency detected [ 133.487866] 6.0.0-rc5-next-20220912 #1 Not tainted [ 133.487872] ------------------------------------------------------ [ 133.487876] syz-executor.1/3842 is trying to acquire lock: [ 133.487882] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 133.487923] [ 133.487923] but task is already holding lock: [ 133.487926] ffff8880175d3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.487957] [ 133.487957] which lock already depends on the new lock. [ 133.487957] [ 133.487960] [ 133.487960] the existing dependency chain (in reverse order) is: [ 133.487964] [ 133.487964] -> #3 (&ctx->lock){....}-{2:2}: [ 133.487978] _raw_spin_lock+0x2a/0x40 [ 133.487995] __perf_event_task_sched_out+0x53b/0x18d0 [ 133.488007] __schedule+0xedd/0x2470 [ 133.488033] schedule+0xda/0x1b0 [ 133.488042] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.488066] syscall_exit_to_user_mode+0x19/0x40 [ 133.488085] do_syscall_64+0x48/0x90 [ 133.488098] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.488116] [ 133.488116] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 133.488130] _raw_spin_lock_nested+0x30/0x40 [ 133.488144] raw_spin_rq_lock_nested+0x1e/0x30 [ 133.488158] task_fork_fair+0x63/0x4d0 [ 133.488176] sched_cgroup_fork+0x3d0/0x540 [ 133.488190] copy_process+0x3f9e/0x6df0 [ 133.488201] kernel_clone+0xe7/0x890 [ 133.488210] user_mode_thread+0xad/0xf0 [ 133.488221] rest_init+0x24/0x250 [ 133.488237] arch_call_rest_init+0xf/0x14 [ 133.488257] start_kernel+0x4c1/0x4e6 [ 133.488274] secondary_startup_64_no_verify+0xe0/0xeb [ 133.488288] [ 133.488288] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 133.488302] _raw_spin_lock_irqsave+0x39/0x60 [ 133.488317] try_to_wake_up+0xab/0x1920 [ 133.488330] up+0x75/0xb0 [ 133.488342] __up_console_sem+0x6e/0x80 [ 133.488359] console_unlock+0x46a/0x590 [ 133.488375] vprintk_emit+0x1bd/0x560 [ 133.488392] vprintk+0x84/0xa0 [ 133.488408] _printk+0xba/0xf1 [ 133.488426] kauditd_hold_skb.cold+0x3f/0x4e [ 133.488441] kauditd_send_queue+0x233/0x290 [ 133.488456] kauditd_thread+0x5da/0x9a0 [ 133.488470] kthread+0x2ed/0x3a0 [ 133.488485] ret_from_fork+0x22/0x30 [ 133.488497] [ 133.488497] -> #0 ((console_sem).lock){....}-{2:2}: [ 133.488511] __lock_acquire+0x2a02/0x5e70 [ 133.488528] lock_acquire+0x1a2/0x530 [ 133.488545] _raw_spin_lock_irqsave+0x39/0x60 [ 133.488559] down_trylock+0xe/0x70 [ 133.488572] __down_trylock_console_sem+0x3b/0xd0 [ 133.488589] vprintk_emit+0x16b/0x560 [ 133.488605] vprintk+0x84/0xa0 [ 133.488622] _printk+0xba/0xf1 [ 133.488638] report_bug.cold+0x72/0xab [ 133.488650] handle_bug+0x3c/0x70 [ 133.488663] exc_invalid_op+0x14/0x50 [ 133.488676] asm_exc_invalid_op+0x16/0x20 [ 133.488692] group_sched_out.part.0+0x2c7/0x460 [ 133.488703] ctx_sched_out+0x8f1/0xc10 [ 133.488713] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.488725] __schedule+0xedd/0x2470 [ 133.488734] schedule+0xda/0x1b0 [ 133.488743] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.488763] syscall_exit_to_user_mode+0x19/0x40 [ 133.488780] do_syscall_64+0x48/0x90 [ 133.488792] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.488809] [ 133.488809] other info that might help us debug this: [ 133.488809] [ 133.488812] Chain exists of: [ 133.488812] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 133.488812] [ 133.488827] Possible unsafe locking scenario: [ 133.488827] [ 133.488830] CPU0 CPU1 [ 133.488832] ---- ---- [ 133.488834] lock(&ctx->lock); [ 133.488840] lock(&rq->__lock); [ 133.488847] lock(&ctx->lock); [ 133.488853] lock((console_sem).lock); [ 133.488859] [ 133.488859] *** DEADLOCK *** [ 133.488859] [ 133.488861] 2 locks held by syz-executor.1/3842: [ 133.488868] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 133.488893] #1: ffff8880175d3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.488921] [ 133.488921] stack backtrace: [ 133.488924] CPU: 0 PID: 3842 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 133.488937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.488945] Call Trace: [ 133.488949] [ 133.488953] dump_stack_lvl+0x8b/0xb3 [ 133.488967] check_noncircular+0x263/0x2e0 [ 133.488984] ? format_decode+0x26c/0xb50 [ 133.488999] ? print_circular_bug+0x450/0x450 [ 133.489017] ? enable_ptr_key_workfn+0x20/0x20 [ 133.489031] ? format_decode+0x26c/0xb50 [ 133.489047] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 133.489065] __lock_acquire+0x2a02/0x5e70 [ 133.489087] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 133.489110] lock_acquire+0x1a2/0x530 [ 133.489127] ? down_trylock+0xe/0x70 [ 133.489141] ? rcu_read_unlock+0x40/0x40 [ 133.489163] ? vprintk+0x84/0xa0 [ 133.489181] _raw_spin_lock_irqsave+0x39/0x60 [ 133.489197] ? down_trylock+0xe/0x70 [ 133.489210] down_trylock+0xe/0x70 [ 133.489224] ? vprintk+0x84/0xa0 [ 133.489241] __down_trylock_console_sem+0x3b/0xd0 [ 133.489259] vprintk_emit+0x16b/0x560 [ 133.489278] vprintk+0x84/0xa0 [ 133.489296] _printk+0xba/0xf1 [ 133.489314] ? record_print_text.cold+0x16/0x16 [ 133.489336] ? report_bug.cold+0x66/0xab [ 133.489350] ? group_sched_out.part.0+0x2c7/0x460 [ 133.489361] report_bug.cold+0x72/0xab [ 133.489376] handle_bug+0x3c/0x70 [ 133.489390] exc_invalid_op+0x14/0x50 [ 133.489404] asm_exc_invalid_op+0x16/0x20 [ 133.489421] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.489434] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.489446] RSP: 0018:ffff88801e9ffc48 EFLAGS: 00010006 [ 133.489455] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.489463] RDX: ffff88800ff99ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 133.489471] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 133.489478] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880175d3000 [ 133.489486] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 133.489497] ? group_sched_out.part.0+0x2c7/0x460 [ 133.489510] ? group_sched_out.part.0+0x2c7/0x460 [ 133.489523] ctx_sched_out+0x8f1/0xc10 [ 133.489536] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.489551] ? lock_is_held_type+0xd7/0x130 [ 133.489570] ? __perf_cgroup_move+0x160/0x160 [ 133.489582] ? set_next_entity+0x304/0x550 [ 133.489600] ? update_curr+0x267/0x740 [ 133.489619] ? lock_is_held_type+0xd7/0x130 [ 133.489637] __schedule+0xedd/0x2470 [ 133.489650] ? io_schedule_timeout+0x150/0x150 [ 133.489662] ? rcu_read_lock_sched_held+0x3e/0x80 [ 133.489683] schedule+0xda/0x1b0 [ 133.489694] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.489715] syscall_exit_to_user_mode+0x19/0x40 [ 133.489733] do_syscall_64+0x48/0x90 [ 133.489747] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.489765] RIP: 0033:0x7ff9811dab19 [ 133.489773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.489784] RSP: 002b:00007ff97e750218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.489795] RAX: 0000000000000001 RBX: 00007ff9812edf68 RCX: 00007ff9811dab19 [ 133.489803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff9812edf6c [ 133.489811] RBP: 00007ff9812edf60 R08: 000000000000000e R09: 0000000000000000 [ 133.489818] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff9812edf6c [ 133.489825] R13: 00007fffee88077f R14: 00007ff97e750300 R15: 0000000000022000 [ 133.489838] [ 133.545308] WARNING: CPU: 0 PID: 3842 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 133.545980] Modules linked in: [ 133.546220] CPU: 0 PID: 3842 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 133.546816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.547641] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.548058] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.549384] RSP: 0018:ffff88801e9ffc48 EFLAGS: 00010006 [ 133.549771] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.550289] RDX: ffff88800ff99ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 133.550806] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 133.551329] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880175d3000 [ 133.551853] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 133.552373] FS: 00007ff97e750700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 133.552959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.553396] CR2: 00007f1246f8e260 CR3: 000000001a802000 CR4: 0000000000350ef0 [ 133.553928] Call Trace: [ 133.554122] [ 133.554291] ctx_sched_out+0x8f1/0xc10 [ 133.554578] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.554969] ? lock_is_held_type+0xd7/0x130 [ 133.555305] ? __perf_cgroup_move+0x160/0x160 [ 133.555644] ? set_next_entity+0x304/0x550 [ 133.555969] ? update_curr+0x267/0x740 [ 133.556275] ? lock_is_held_type+0xd7/0x130 [ 133.556599] __schedule+0xedd/0x2470 [ 133.556879] ? io_schedule_timeout+0x150/0x150 [ 133.557228] ? rcu_read_lock_sched_held+0x3e/0x80 [ 133.557597] schedule+0xda/0x1b0 [ 133.557855] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.558226] syscall_exit_to_user_mode+0x19/0x40 [ 133.558582] do_syscall_64+0x48/0x90 [ 133.558864] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.559249] RIP: 0033:0x7ff9811dab19 [ 133.559526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.560860] RSP: 002b:00007ff97e750218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.561410] RAX: 0000000000000001 RBX: 00007ff9812edf68 RCX: 00007ff9811dab19 [ 133.561930] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff9812edf6c [ 133.562454] RBP: 00007ff9812edf60 R08: 000000000000000e R09: 0000000000000000 [ 133.562974] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff9812edf6c [ 133.563498] R13: 00007fffee88077f R14: 00007ff97e750300 R15: 0000000000022000 [ 133.564033] [ 133.564213] irq event stamp: 1086 [ 133.564465] hardirqs last enabled at (1085): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 133.565157] hardirqs last disabled at (1086): [] __schedule+0x1225/0x2470 [ 133.565764] softirqs last enabled at (900): [] __irq_exit_rcu+0x11b/0x180 [ 133.566390] softirqs last disabled at (863): [] __irq_exit_rcu+0x11b/0x180 [ 133.567021] ---[ end trace 0000000000000000 ]--- 20:10:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) [ 133.825219] audit: type=1400 audit(1663013425.661:9): avc: denied { write } for pid=3870 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.884647] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.885743] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 133.886219] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 133.886685] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 133.887233] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 133.890326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.891153] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.891735] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.892433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.892842] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.893428] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.894088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.894475] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.895437] Buffer I/O error on dev sr0, logical block 2, async page read [ 133.896266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.896647] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.897239] Buffer I/O error on dev sr0, logical block 3, async page read [ 133.897900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.898283] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.898911] Buffer I/O error on dev sr0, logical block 4, async page read [ 133.899578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.900080] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.900719] Buffer I/O error on dev sr0, logical block 5, async page read [ 133.901404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.901851] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.902465] Buffer I/O error on dev sr0, logical block 6, async page read [ 133.903153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.903570] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.904222] Buffer I/O error on dev sr0, logical block 7, async page read [ 133.905004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.905422] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.906066] Buffer I/O error on dev sr0, logical block 0, async page read [ 133.906756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.907180] Buffer I/O error on dev sr0, logical block 1, async page read [ 133.907890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.908486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.909091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.909650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.910255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.911008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.911618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.912216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.913354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.914520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.915118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.915668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.916274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.917129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.945273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.946615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.947255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.947847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.948402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.949530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.950131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.950748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.951355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.951921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.952471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.953063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.953611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.954319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.954919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.955467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.956101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.956678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.957267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.958437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.959033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.959589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.960178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.960734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.961362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.962002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.962567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.963225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.963884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.964443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.965648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.966221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.966862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.967429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.968058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.968593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.969198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.969751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.970316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 133.970889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.012548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.013895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.018993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.020409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.022323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.023940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.024492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.025221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.026928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.027481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.028122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.028684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.029879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.030440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.034903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.035444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:25 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) [ 134.129349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.134470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.135053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.135646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.136465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.137056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.137602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.138183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.157359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.157977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.158549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.159605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.160203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.160785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.161349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.162034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.162664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.163273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.163953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.164534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.165135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.165797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.166378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.166983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.167611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.168907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.169466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.170913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:26 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:26 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa) [ 134.173253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.173950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.174528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.175107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.203947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.205766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.206454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.207600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.208222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.209121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.209731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.210336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:26 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa) 20:10:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) 20:10:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) [ 134.403390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.404395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.408384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.409317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.411436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.412052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.412659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.413883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.414866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.415900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.416476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.417372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.418151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.418889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.419455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.420514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.421445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.422083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.422822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.423441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.424054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.425013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.425891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.426989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.427917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.428531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.429234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.429872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.430492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.431155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.431924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.433244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.434018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.435056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.435835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.436467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.437117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.437966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.440358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.442570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.444623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.445229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.445911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.446457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.447328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.447961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.448547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.449375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.450006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.450588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.451300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.453671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.455698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.458922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.460320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.461007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.462263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.468562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.497432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.498088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.499458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.500126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.501092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.501826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.502424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.503167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.506842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.507433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.508876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.509482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.510540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.511141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.511743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.512343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.520152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.524059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.524580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.525143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.528076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.530785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.531315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.531867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.532502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.534123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.545381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.546310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.547739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.557547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.558078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.558616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.559344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.560137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.560668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.561265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.563200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.563769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.564348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.564974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.574001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.580891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.581396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.581950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.585204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.585872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.586409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.586931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.587523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.590877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.591393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.591934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.592446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.593198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.593722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.594252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.595529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.600145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.603695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.604272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.612854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.616003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.616538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.617076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.636543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.637216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.637742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.638483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.639224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.639735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.640502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.641255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.641880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.646389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.647138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.647665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.648492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.649047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.652597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.653266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.653905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.654728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.655468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.656223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.656914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.657725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.658482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 134.659325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.569435] audit: type=1400 audit(1663013427.405:10): avc: denied { module_load } for pid=3982 comm="syz-executor.5" path="/syz-executor.5" dev="sda" ino=15935 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 135.570328] Invalid ELF header type: 3 != 1 [ 135.578664] Invalid ELF header type: 3 != 1 20:10:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 20:10:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:27 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) 20:10:27 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) 20:10:27 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xa) 20:10:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:27 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:27 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4952, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x111100, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) [ 135.670546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.671297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.672035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.672724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.673321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.674075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.674741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.675436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.676197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.676909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.677502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.678219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.678870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.680672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.681258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.681947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.682640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.683270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.683878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.684450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.685008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.685589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.686212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.686924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.687520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.688134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.688959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.689592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.690154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.690782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.691348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.692131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.692798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.693392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.693723] hrtimer: interrupt took 21781 ns [ 135.693961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.695138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.695727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.696332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.696888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.697498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.698129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.698872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.699454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.700074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.700660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.701310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.701882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.702634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.703424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.704082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.704695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.705317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.705912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.706514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.707166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.707869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.708662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.709372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.710086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.711135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.711736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.712352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.712915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.713527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.714139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.714749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.715306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.716232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.716949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.717679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.718278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.718992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.721970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.723011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.723564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.724219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.726578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.727443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.729911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.734184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.735141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.735991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.738017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.739047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.739863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.741594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.742153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.742782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.743396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.744012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.744552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.745146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.745694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.746315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.746874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.747469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.748823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.749366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.750095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.751172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.752000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.752677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.753217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.755034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.755612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.756464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.757051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.757851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.758390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.759079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.759756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.760351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.760982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.761607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.762181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.763946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.764505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.765129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.765645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.766282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.872135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.872850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.873429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.874074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.874667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.875312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.875918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.876522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.877188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.877807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.878365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.879026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.879586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.880258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.880890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.881543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.882720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.883352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.884014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.884608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.885247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.885859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.887600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.888199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.918096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.918977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.919822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.920402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.921308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.921917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.922480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.923160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.924123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.924698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.942973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.945015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.945623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.946611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.947671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.948317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.948992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.949557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.950205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.951248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.952229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.953348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.954330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.955464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.956455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.957452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.958396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.959502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.960499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.961505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.962467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.963480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.964448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.965448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.966413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.967949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.968562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.969497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.970096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.970666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.971273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.972168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.972717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.973330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.973900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.974438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.976099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.977913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.978479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.979208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.979891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.980451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.981633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.982600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.983673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.984643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.985858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.986827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.987857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.989008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.989593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.990570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.991154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.992062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.992609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.993177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.993783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.994461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.996676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.998302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 135.999296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.000873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.001968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.002918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.003957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.007039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.007626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.008608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.009202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.011035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.011588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.012172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.012739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.013351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.013960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.014500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.015073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.016882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.017451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.018026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.018585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.019211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.019986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.021911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.022478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.023087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.023627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.024563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.025659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.026295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.026922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.027489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.028589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.029269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.029891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.030442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.031140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.031741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.034321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.034947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.035483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.036095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.036638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.037540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.038139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.038897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.039946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.040546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.041215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.043908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.044478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.045075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.045610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.149729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.184064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.185030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.186179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.187951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.188580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.189187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.189964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:28 executing program 3: syz_emit_ethernet(0xe81, &(0x7f00000018c0)={@local, @dev, @val, {@generic={0x0, "bf4569289cb39066d235b945dbadab1efcc61b44dfe709bec07009696b83b1b03ffcfaaa8d54c57eeb60827d04016b7ec55fe78cc89c5a4102d063f239b7911d60a5630d84b34ebb23ad9fc97f715ba9ed3dd118c2cbe62e6ccee8c1d5402d974d19bfbfdf7f224839b7102b6eca49c22340649e80d22b336cbe949c472e4435788a5011754198f3895a30169c0a6ab91bfa81562bb719508a1e590d9ec02b4d32ddbc7674143998f469b102d486407dd249bae4b5a59cf6d6b4b4577a92d7667a6ea59b4d99e31ca0056c18457ca20bb9106994995b8bb4cd30944a0ccf5976e2b11474b8b93003885b7f5e61c38195e9e8c0eaf4f0d8a634cab329b993829aa59e74eaccb1d9adc5d40e653567714657d0dae3a6170194d67f7b14103ae3833040cef6bd61be1a7a1c8da41ac22615d10d41c532c4c2c06349fd92c5cfed78abc9765c263e0f04059cee27c0fe72020502976bd36cf973d102d6e0994a48594e07ee583f1e110cd9e01f30c6b91e7b611cf021fe17689a5d5469557979d0965c9f7b68383adf5dd72db3c737427c40e79cc7ec75dc922eab744a98b7860aa899cb8d84c6a3cea5db43814e6d60c962fe1ae29ee72caa2272ce568871961f9bb7cacb892dba09c7e747f51de4ab7d0a2048563fc0bd441826974cc57aefdad1a3b607d27a9d2951283230e3156ed47543f68a7e2e3fbe7b8afb47b57fb07391554f665b2661cf241cf97605209babf690275ea9438555f1f625c8cfaab383d927dffc529b2484f9e4ee12a79c97fe54a3913b7e93b5340837b9acbd887a9f388d75ef75e68458a8bbec1fc3147a9755a16f40e762dd4710fe816bc084331f32486f2a331f63d2cca98a48b28e456945206a4cce4049ddd27de3498ab378695d785bc77e76c49653fadfd16e56e4f896f6432b4404937be22e3b20ed7fc85fdce64ba94ba0c498b5dc4b3eca09132ff7e56ae4504facd13a74c304578f9af8177bbed9c11e0a74e4d982fac453ba5943db1b684b5c59ed75867ce43d4c28e0f5957159cc8059b1cd7256aee8d0e4a9f5cb250d338993eeb36f8140cfa440bb0652ff6dfe9267d8b2e43bfe1b3bbf2e45da0f341b00c257a5d8d051f197f801266435c2ac4226a2f6f7623d0d4b4dbf3dea917395ae26d8512979381e77f60de006b705f437c3b9bd64b7170d80090f88214e60e365be2a8d726e16d85697143df3165a0c993b8a0ce50ce6a128f57a77032252d14a21f7a94b259f59ed72c89986ee600a30fe6357ee0a87644cda8d3a6ab921f9433885f99cf872973e435da3606da052831397817e1c63e0ecf2cb65df7db77db7993869b8b22cd714526c7effd3c3236f61b9ab1a93f4ca10ad165a336cdfd8d986a5d13843d7733e2351b6e25783a0853bb6c5a33a431b80c869c8915c5dcfa812875d42bdee666edb8c42c159aad3d65739c9f7f1d0ae306ea3ba21359e542a3d894a813ac470b15b5be50fa69962d5098a3fedceee369c1402216eba758269863fc98d4327b8fd261e63f4f163ee32d87800835a5d4d8d4b6b51d791363334f53e43b9ab6c96bef39b65d887a9864434e24787e9733773018da56452c09e92ee2d8031addc9154abcfa156ff75eef5cf1adc975dcd3bf0ebc76b2bc26df3c065079a109ac80fdfec131bb05a2f077e9ce140e6bcbb8611d698fe13a054032fca249502eadde7140b2413d409b1d6e08a66e1f40064bb1c7d978ce84ca2036d4c33368f641ea7427a0b8fb6faeb569d6fd99fb10ab12e5737ba48fa0e9c8833001ee400c327c2e4dfa44f133ba8fd9341c863a88088f8799ed372ada5aafa80a892ae8dfb485f4828851f78faf7bc5f9f2163cd7bff172b0a9f360178f1f6bbc37e10bbd10c3a5e7c0a9793c887f5db1b54b21f3c2cf79ca71cea880124ec82208ce782c429028e4952be50448fc99b0da8237fb7c7a856ec3976750da3aa499cdabb18d9da0b2f7527f1db27ff02c535e424e36fbb28df13e8b933ca942415cd204456cf7c4432fecccd2330b6a4b779226b5228a84819ee753469103e94c6a92953affc94121e26138c156dadee3ebad609a2e98c05dd8f82283627dafcf7d834b106935a522de4171d7b4957d201d1a3214117c96b82d0b47648d7f32e8f2369769823a1f071b4da1ab59a611f9ccb819c0164a413b4af4583cdcab86097cbaa8016d5589c4be61cd24670c9195b3954ad4281c6590c5f83b88b58d3d04304715aa6a5ee3e3b7cc0818e851876317288214afeec8c03c8449bf4f1972f08637896700ea29bd329e9dd4432d4fb44bcea83d952725970310373f4ef99ba0625582a5d43287904b1d2491c0f6f79b3d4dbc889060f771f319696ac50a9688904fe72680a27b94efe77dcab96b8c7fc8dcda39eb31d09909e4fa45f5964eb9af5bddc17bebf663cb5544dbc129683c9a9f0b03c22330814abcc78dfd50c3fdc6b3b08b77e7be0b1ac30d927ab15d0cb12b5cb0fd4cf4a3df45042e0e83c1737086cb4bc0926a85895ec65d077df72ca70644f3254aab3c60ab3edba0a9e91e9c1618487de4cb91fd9c31a8d7fa199ebfead9f817b90751ae373041fe87336658e6fe312602909d317ee39b277af71401ca4236458d34675f5c4ba902b0d4c774f5689e572c1d06ca81858d79cef2a71d0c72117f8071c39a69b9682ee2c54a3d76a777f21b1bb82f5507c6eebacf85a288825a65d5b5384a3e8d3c10d052a3c32e5979995416ef429c92a5e33468583ddb61eae9502c3606ae8ffded0833ae888754f68c7b5ab52e25da0e8ef2300f843193c93df661553762bc95b5fbce01fa4640889172d627d3b9da7a0ded8d174c1901f7772a65af4996663a3bccf2b9deb560c9b8b1802480ac27473968df4905a74bedc64524097cdc955750e0ca51bf4c4134bc766c9dada97c95b67f8dc4cc0ca036d13e42948a201f941687c99721fafb432dccdbe5a3201ef4d76ba740709b0b1fadbccabda878d3710a6a63e94a9933c47064845fa4f107a55f14aaa18f9ec58ed8a867580b12be6238ffd87f61b51ddf6709553025579e1064b08878ef784acf8467abd1b05addcd541bbeffccb822fcb959b96cf44247758da84379cc55430958621443638c5bd1bf5634ee9fc74262d5130d5ed4a472d31b3cbc8f7d20c4ea1da2126dd5655518f81aa2a25506e7680bc586ac725c047d9cad970b4fb6ded0f998e4d9414d24af84a4761d57333f8299e2bf5586b7611fa5c83ccb86b8ff4bfb995a9a198ae21ced88228ea4e368b7c9bcb8ff5ec1b85680c91d64e0ba500367fcf7a74a653769f67a7d54788c88182e8f495d6787c28a4573848ab27eabf8802260bb2aa75e1d78a8df27d73bd6cba21842440c6ed5dafef1871aef8f9c591f2b90f50ad3ccb84f383346b797d74373943a64f43ccb965c429e885a3bbd35987e5af36765a98ca7a816d16feda970c214f4dd4093e605384b3fc0ca1efe7879edb108c94ffb4a26627fc87f34f3aa256578dec4e919c5a0a20d41fb01d8c1e356d6a7c88e0c91c5e086f9f61498b705296a31b2dd2c33c3b7a0452ae7614d4db0fdc0daff98255def516a399920683510782775d3e307e3ecfcb3f8c91e28d2c628c5f416b55e27d976c542ebbf8bc7565e78bfe389710f1d87a6c038bca6be3b11e0621b576e525edb17bb3142f1864e14db6124df35577391c97d7a73ff42942e92f3cdc1fe57482d6340133864ba0046f15751fe877657f1e4cf1319ad10d621cf10a1c626cbc953365720c458df7bb93e9e77698337dd0cff4357cea881b638b48503d0e21e25e9b073558edaf26453fe23765a80f84ef8976c7afd572d9cd2ad562414f07f9c247a59fde36edd0e4d55f9d0f55a6ec103ff5744c3cc429ccd83f1835b42c579117f0718e13fcb38870c0f56ae71524e69666240d42d1ea10b1a9c909a805f82b77d0d5dd41aa6f72df213226525dda1692dbf7ca288da5963dbb3c1b5a26e28db8c7b4b2be33be024fd6a76e9d08ae458e3e607c5dd3dd9b423de150c818ba1bfecbda7a0b86c34e7844c7698f40be96a1ade8a124c8a7b17662885c453d9cd90e8fcbd0d1dd201e9b55a64ed67b69403b41c4f6f33fe049a508c496edc1f98e696c827dae369c9d58080c90846ffd93e33f0a7342c45d72303a3d5e1500da521857bcb7fed37db03904c479e1655a2a09c3f2f4e0f0d632f7e957183d339c776cfc34346af6f7fd0df1c2c0f03f206a71409f656f28a7e035839c6893492a217cb872e8837608cf1b1c0bd29a79554017baab45e79be163bee61b8d34629791fd9441bb1a632138e5bbe82a5d2cb8f43718bfbc65e0857fff7320e7c8b885d69d862a326c7fe432838c4dd9766446b6ad69e540d1f3a1287ed8b7718afb101de5ef88ecedb06981b77010a58d0393bf6eac42ee4ee7959f5c283d49bf6d36d5393b3fef2476cf2a28d3a0b9db840d67199b21ad5efd40ac7edcc0fb305412d59569fdbcb269a4c8d5a4405ba7de9a74fa6cf84ce891e7bba379be8376aa5cae0e97543a8ba6a6aa29428730b38d39f7e9f0fefcac281666e075e1e45e56e8305f0bf7784081f446486d094090a2b2bbc35e2ecf05775813ef180d252cadd453d0e34de4f267e43ac91cfa359b1019f915b2355d719fd994186c5919f37dd7f1474c1299f50ee02046f64cc39db9512008c443162ef3304b0e47fc383157ef009ad6f6f6aa36c55bdf9c82768eb5c9c4cb11d267f6964bbc729cc10106cef65da71ef7f93d857c12e974429e86afe2a68309fccabdd7c01b2b8079b8ab862f0a8f438a8499bd5a74c08f4e8fa79983c8b03105687cc90c0de565effbdfbd11c52fcd4de0e11c008f83254b5d03df9aa014f6e65a8f9005e605b6f5087462fa9940d4e604d3ace060ff6ae24dc43540fe5bf738790232581c0cb29fcd6d50664886b4c0cfd9cc46b1bb86c3b860c89624722302eab720cb9a4e0c04f6018a301c2846dcdc05a215b11bfca892952a40b893db568fa84fda1475077b0f3576633151d2693430ee4f1399dde63b7f4ea8e1b43a40f38acc40d80a9d0e89f73930bd1c3df9ae0d25f13e3cd107ed7751c26041393c651f5116fade7b0516bfb8d7457d3efa56deff6567d87d6e5c7a5c0e0e185364df941ee93af9040277001d41df3bc4c4172ede10a5d614aad7e5637b66224f00ef651e3d5a"}}}, 0x0) 20:10:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 20:10:28 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 20:10:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) 20:10:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r3 = fork() r4 = fork() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) 20:10:28 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000001540)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002900)=[@ip_pktinfo={{0x1c, 0x11, 0x8, {0x0, @private, @private}}}], 0x20}}], 0x2, 0x0) 20:10:28 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff801, 0x0) 20:10:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 20:10:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='L', 0x1}], 0x1) 20:10:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000001640)) 20:10:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80, 0x8}) 20:10:29 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:29 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x14, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 20:10:29 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000005300)=[0x0, 0x0]) statx(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x6000, 0x400, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000058c0)=[r1, r3, 0x0, r4, 0x0]) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, r2, 0x0, 0x1}, 0x3ff, 0x70, 0x9, 0x8, r5}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r6, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 20:10:29 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:29 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x14, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 20:10:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:29 executing program 0: mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) madvise(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x9) 20:10:29 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0xffffffffffffffff}, 0x0) io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0) 20:10:29 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) 20:10:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1000003, 0x0, 0x0) 20:10:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x8000, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) r1 = syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1, 0x1f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x110, r1, 0x0) r3 = syz_io_uring_setup(0x3c72, &(0x7f0000000280), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x13, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syncfs(0xffffffffffffffff) ftruncate(r0, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000780), 0x5, 0x200101) [ 138.160769] mmap: syz-executor.0 (4087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.172777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.175919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.176667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.177467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.178209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.179086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.181930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.182641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.183479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.184251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.184974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.185683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.186470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.187242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.188028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.188866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.193654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.197579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.200984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.202921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.203514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.204161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.204793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.206948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.207606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.209273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.210940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.211533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.212910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.214900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.215470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.216079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.216676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.218463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.221176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.226513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.228014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.229930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.230520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.233939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:30 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x14, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 20:10:30 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) 20:10:30 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 20:10:30 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 20:10:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) 20:10:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 20:10:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x8000, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) r1 = syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1, 0x1f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x110, r1, 0x0) r3 = syz_io_uring_setup(0x3c72, &(0x7f0000000280), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x13, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syncfs(0xffffffffffffffff) ftruncate(r0, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000780), 0x5, 0x200101) 20:10:30 executing program 1: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x14, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) [ 138.532711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.534742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.535328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.535997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.536563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.537375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.538147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.538969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.539649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.540334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.541389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.542030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.542654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:30 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) [ 138.547008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.548480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.549292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.550155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.551147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.553286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.554454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.555081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.555763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.560638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.561522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.562629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.563499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.565195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.565806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.567533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.568119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.569877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.570451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.571156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.571723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.572456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.573071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.574894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:30 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 20:10:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 138.576610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.597817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 20:10:30 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) [ 138.942976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 138.943942] blk_print_req_error: 611 callbacks suppressed [ 138.943957] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.945865] buffer_io_error: 621 callbacks suppressed [ 138.945878] Buffer I/O error on dev sr0, logical block 7, async page read 20:10:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x8000, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) r1 = syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1, 0x1f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x110, r1, 0x0) r3 = syz_io_uring_setup(0x3c72, &(0x7f0000000280), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x13, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syncfs(0xffffffffffffffff) ftruncate(r0, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000780), 0x5, 0x200101) 20:10:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) 20:10:30 executing program 7: r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x2000) 20:10:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:30 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 20:10:30 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/block', 0xc1, 0x5c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x0, 0x81, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 20:10:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x8000, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) r1 = syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1, 0x1f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x110, r1, 0x0) r3 = syz_io_uring_setup(0x3c72, &(0x7f0000000280), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x13, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syncfs(0xffffffffffffffff) ftruncate(r0, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000780), 0x5, 0x200101) 20:10:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) 20:10:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x18292, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 20:10:31 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 20:10:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x8000, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) pidfd_open(0x0, 0x0) r1 = syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bc, 0x20, 0x1, 0x1f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x110, r1, 0x0) r3 = syz_io_uring_setup(0x3c72, &(0x7f0000000280), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x13, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syncfs(0xffffffffffffffff) ftruncate(r0, 0xfffffffffffffff7) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r2) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000780), 0x5, 0x200101) 20:10:31 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xb96, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5e9a, 0x0, 0x0, 0x0, 0x0) 20:10:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x VM DIAGNOSIS: 20:10:25 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88801e9ff698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff97e750700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1246f8e260 CR3=000000001a802000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff9812c17c0 00007ff9812c17c8 YMM02=0000000000000000 0000000000000000 00007ff9812c17e0 00007ff9812c17c0 YMM03=0000000000000000 0000000000000000 00007ff9812c17c8 00007ff9812c17c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000015 RBX=0000000000000001 RCX=ffffffff816d2eca RDX=0000000000000006 RSI=ffffffff85ecaf5a RDI=ffffffff85bade44 RBP=ffff88800f957620 RSP=ffff88800f957548 R8 =ffffffff85ecaf5a R9 =ffffffff85ecaf5e R10=ffffed1001f2aec6 R11=000000000003603d R12=ffff88800f957609 R13=ffff88800f957628 R14=ffff88800f9575c8 R15=ffffffff816d2eca RIP=ffffffff8111b632 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb611678260 CR3=0000000019c10000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000