[  OK  ] Started OpenBSD Secure Shell server.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.1.26' (ECDSA) to the list of known hosts.
2021/06/28 10:50:27 fuzzer started
2021/06/28 10:50:27 dialing manager at 10.128.0.163:36783
2021/06/28 10:50:28 syscalls: 1998
2021/06/28 10:50:28 code coverage: enabled
2021/06/28 10:50:28 comparison tracing: enabled
2021/06/28 10:50:28 extra coverage: enabled
2021/06/28 10:50:28 setuid sandbox: enabled
2021/06/28 10:50:28 namespace sandbox: enabled
2021/06/28 10:50:28 Android sandbox: enabled
2021/06/28 10:50:28 fault injection: enabled
2021/06/28 10:50:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/06/28 10:50:28 net packet injection: /dev/net/tun does not exist
2021/06/28 10:50:28 net device setup: enabled
2021/06/28 10:50:28 concurrency sanitizer: enabled
2021/06/28 10:50:28 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/06/28 10:50:28 USB emulation: /dev/raw-gadget does not exist
2021/06/28 10:50:28 hci packet injection: /dev/vhci does not exist
2021/06/28 10:50:28 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2021/06/28 10:50:28 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2021/06/28 10:50:28 suppressing KCSAN reports in functions: 'blk_mq_rq_ctx_init' 'dd_has_work' 'exit_mm' 'kauditd_thread' 'ext4_mark_iloc_dirty' 'generic_write_end' '__xa_clear_mark' 'do_sys_poll' 'n_tty_receive_buf_common' 'ext4_mb_good_group' 'ext4_free_inodes_count' 'blk_mq_sched_dispatch_requests' '__xa_set_mark' 
2021/06/28 10:50:28 fetching corpus: 0, signal 0/2000 (executing program)
2021/06/28 10:50:28 fetching corpus: 49, signal 15108/18750 (executing program)
2021/06/28 10:50:28 fetching corpus: 99, signal 23526/28700 (executing program)
2021/06/28 10:50:28 fetching corpus: 149, signal 32280/38750 (executing program)
2021/06/28 10:50:28 fetching corpus: 199, signal 36454/44243 (executing program)
2021/06/28 10:50:29 fetching corpus: 249, signal 39378/48507 (executing program)
2021/06/28 10:50:29 fetching corpus: 299, signal 43597/53901 (executing program)
2021/06/28 10:50:29 fetching corpus: 349, signal 46212/57733 (executing program)
2021/06/28 10:50:29 fetching corpus: 399, signal 50083/62607 (executing program)
2021/06/28 10:50:29 fetching corpus: 449, signal 52482/66121 (executing program)
2021/06/28 10:50:29 fetching corpus: 499, signal 55136/69748 (executing program)
2021/06/28 10:50:29 fetching corpus: 549, signal 57795/73342 (executing program)
2021/06/28 10:50:29 fetching corpus: 599, signal 62553/78649 (executing program)
2021/06/28 10:50:29 fetching corpus: 647, signal 64636/81588 (executing program)
2021/06/28 10:50:29 fetching corpus: 697, signal 67025/84746 (executing program)
2021/06/28 10:50:29 fetching corpus: 747, signal 68800/87356 (executing program)
2021/06/28 10:50:29 fetching corpus: 797, signal 70945/90245 (executing program)
2021/06/28 10:50:29 fetching corpus: 847, signal 73015/92984 (executing program)
2021/06/28 10:50:29 fetching corpus: 897, signal 74512/95231 (executing program)
2021/06/28 10:50:29 fetching corpus: 947, signal 75744/97227 (executing program)
2021/06/28 10:50:29 fetching corpus: 997, signal 76911/99157 (executing program)
2021/06/28 10:50:29 fetching corpus: 1047, signal 78254/101233 (executing program)
2021/06/28 10:50:29 fetching corpus: 1097, signal 79963/103537 (executing program)
2021/06/28 10:50:29 fetching corpus: 1147, signal 81414/105546 (executing program)
2021/06/28 10:50:29 fetching corpus: 1197, signal 82289/107159 (executing program)
2021/06/28 10:50:29 fetching corpus: 1247, signal 83512/108980 (executing program)
2021/06/28 10:50:29 fetching corpus: 1297, signal 84885/110921 (executing program)
2021/06/28 10:50:29 fetching corpus: 1347, signal 85792/112482 (executing program)
2021/06/28 10:50:29 fetching corpus: 1397, signal 87501/114545 (executing program)
2021/06/28 10:50:29 fetching corpus: 1447, signal 89106/116485 (executing program)
2021/06/28 10:50:29 fetching corpus: 1497, signal 90339/118113 (executing program)
2021/06/28 10:50:29 fetching corpus: 1547, signal 91489/119758 (executing program)
2021/06/28 10:50:29 fetching corpus: 1597, signal 92244/121117 (executing program)
2021/06/28 10:50:29 fetching corpus: 1647, signal 93348/122611 (executing program)
2021/06/28 10:50:30 fetching corpus: 1697, signal 94611/124155 (executing program)
2021/06/28 10:50:30 fetching corpus: 1747, signal 96046/125824 (executing program)
2021/06/28 10:50:30 fetching corpus: 1797, signal 97297/127349 (executing program)
2021/06/28 10:50:30 fetching corpus: 1847, signal 98197/128677 (executing program)
2021/06/28 10:50:30 fetching corpus: 1897, signal 99811/130286 (executing program)
2021/06/28 10:50:30 fetching corpus: 1947, signal 100639/131540 (executing program)
2021/06/28 10:50:30 fetching corpus: 1997, signal 101549/132765 (executing program)
2021/06/28 10:50:30 fetching corpus: 2047, signal 102318/133935 (executing program)
2021/06/28 10:50:30 fetching corpus: 2096, signal 103558/135290 (executing program)
2021/06/28 10:50:30 fetching corpus: 2146, signal 104852/136673 (executing program)
2021/06/28 10:50:30 fetching corpus: 2196, signal 105596/137732 (executing program)
2021/06/28 10:50:30 fetching corpus: 2246, signal 106218/138689 (executing program)
2021/06/28 10:50:30 fetching corpus: 2296, signal 107170/139801 (executing program)
2021/06/28 10:50:30 fetching corpus: 2346, signal 108170/140940 (executing program)
2021/06/28 10:50:30 fetching corpus: 2396, signal 110026/142386 (executing program)
2021/06/28 10:50:30 fetching corpus: 2446, signal 111092/143465 (executing program)
2021/06/28 10:50:30 fetching corpus: 2496, signal 111821/144436 (executing program)
2021/06/28 10:50:30 fetching corpus: 2546, signal 113089/145539 (executing program)
2021/06/28 10:50:30 fetching corpus: 2596, signal 113788/146432 (executing program)
2021/06/28 10:50:30 fetching corpus: 2646, signal 114284/147217 (executing program)
2021/06/28 10:50:30 fetching corpus: 2696, signal 115287/148158 (executing program)
2021/06/28 10:50:30 fetching corpus: 2746, signal 115924/148972 (executing program)
2021/06/28 10:50:30 fetching corpus: 2796, signal 116903/149870 (executing program)
2021/06/28 10:50:30 fetching corpus: 2846, signal 117429/150619 (executing program)
2021/06/28 10:50:30 fetching corpus: 2896, signal 118891/151591 (executing program)
2021/06/28 10:50:30 fetching corpus: 2945, signal 119434/152247 (executing program)
2021/06/28 10:50:30 fetching corpus: 2995, signal 120178/152966 (executing program)
2021/06/28 10:50:30 fetching corpus: 3045, signal 120742/153638 (executing program)
2021/06/28 10:50:30 fetching corpus: 3095, signal 121413/154328 (executing program)
2021/06/28 10:50:30 fetching corpus: 3145, signal 122078/154991 (executing program)
2021/06/28 10:50:31 fetching corpus: 3195, signal 122659/155654 (executing program)
2021/06/28 10:50:31 fetching corpus: 3245, signal 123323/156281 (executing program)
2021/06/28 10:50:31 fetching corpus: 3295, signal 123986/156895 (executing program)
2021/06/28 10:50:31 fetching corpus: 3345, signal 125781/157740 (executing program)
2021/06/28 10:50:31 fetching corpus: 3394, signal 126457/158302 (executing program)
2021/06/28 10:50:31 fetching corpus: 3444, signal 127174/158882 (executing program)
2021/06/28 10:50:31 fetching corpus: 3494, signal 127885/159406 (executing program)
2021/06/28 10:50:31 fetching corpus: 3544, signal 128336/159902 (executing program)
2021/06/28 10:50:31 fetching corpus: 3594, signal 129506/160485 (executing program)
2021/06/28 10:50:31 fetching corpus: 3644, signal 130206/161023 (executing program)
2021/06/28 10:50:31 fetching corpus: 3694, signal 131289/161543 (executing program)
2021/06/28 10:50:31 fetching corpus: 3744, signal 131866/162017 (executing program)
2021/06/28 10:50:31 fetching corpus: 3794, signal 132654/162472 (executing program)
2021/06/28 10:50:31 fetching corpus: 3844, signal 133158/162929 (executing program)
2021/06/28 10:50:31 fetching corpus: 3894, signal 133885/163340 (executing program)
2021/06/28 10:50:31 fetching corpus: 3944, signal 134456/163722 (executing program)
2021/06/28 10:50:31 fetching corpus: 3994, signal 135120/164086 (executing program)
2021/06/28 10:50:31 fetching corpus: 4043, signal 135761/164472 (executing program)
2021/06/28 10:50:31 fetching corpus: 4093, signal 136186/164581 (executing program)
2021/06/28 10:50:31 fetching corpus: 4143, signal 136858/164581 (executing program)
2021/06/28 10:50:31 fetching corpus: 4193, signal 137185/164588 (executing program)
2021/06/28 10:50:31 fetching corpus: 4243, signal 137594/164588 (executing program)
2021/06/28 10:50:31 fetching corpus: 4292, signal 138085/164589 (executing program)
2021/06/28 10:50:31 fetching corpus: 4342, signal 138622/164589 (executing program)
2021/06/28 10:50:31 fetching corpus: 4392, signal 139106/164589 (executing program)
2021/06/28 10:50:31 fetching corpus: 4442, signal 140112/164589 (executing program)
2021/06/28 10:50:31 fetching corpus: 4491, signal 140787/164605 (executing program)
2021/06/28 10:50:31 fetching corpus: 4541, signal 141266/164605 (executing program)
2021/06/28 10:50:31 fetching corpus: 4590, signal 141897/164608 (executing program)
2021/06/28 10:50:31 fetching corpus: 4640, signal 142247/164608 (executing program)
2021/06/28 10:50:31 fetching corpus: 4689, signal 143076/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 4739, signal 143632/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 4789, signal 144087/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 4839, signal 144521/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 4889, signal 145102/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 4939, signal 145641/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 4989, signal 146143/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 5039, signal 146936/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 5089, signal 147809/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 5139, signal 148111/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 5189, signal 148506/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 5239, signal 149119/164650 (executing program)
2021/06/28 10:50:32 fetching corpus: 5289, signal 149742/164673 (executing program)
2021/06/28 10:50:32 fetching corpus: 5339, signal 150125/164673 (executing program)
2021/06/28 10:50:32 fetching corpus: 5389, signal 150550/164673 (executing program)
2021/06/28 10:50:32 fetching corpus: 5439, signal 151057/164673 (executing program)
2021/06/28 10:50:32 fetching corpus: 5489, signal 151468/164674 (executing program)
2021/06/28 10:50:32 fetching corpus: 5539, signal 151796/164674 (executing program)
2021/06/28 10:50:32 fetching corpus: 5589, signal 152122/164674 (executing program)
2021/06/28 10:50:32 fetching corpus: 5639, signal 152632/164675 (executing program)
2021/06/28 10:50:32 fetching corpus: 5689, signal 152956/164678 (executing program)
2021/06/28 10:50:32 fetching corpus: 5739, signal 153334/164681 (executing program)
2021/06/28 10:50:32 fetching corpus: 5789, signal 153725/164681 (executing program)
2021/06/28 10:50:32 fetching corpus: 5839, signal 154089/164681 (executing program)
2021/06/28 10:50:32 fetching corpus: 5888, signal 154436/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 5938, signal 154833/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 5988, signal 155394/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6038, signal 155626/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6088, signal 155931/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6138, signal 156357/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6188, signal 156719/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6238, signal 157132/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6288, signal 157480/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6338, signal 158164/164734 (executing program)
2021/06/28 10:50:32 fetching corpus: 6388, signal 158746/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6438, signal 159228/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6488, signal 159804/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6538, signal 160495/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6588, signal 161005/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6638, signal 161890/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6688, signal 162366/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6738, signal 162762/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6778, signal 163189/164734 (executing program)
2021/06/28 10:50:33 fetching corpus: 6778, signal 163189/164734 (executing program)
2021/06/28 10:50:34 starting 6 fuzzer processes
10:50:34 executing program 0:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000001740)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

10:50:34 executing program 1:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14)
ftruncate(r0, 0x1)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x6f52)
fallocate(r0, 0x1, 0x1008, 0x28120001)

10:50:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="e07fac12a0c0c89fd5269a"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

10:50:34 executing program 2:
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)='\x00', 0x1}], 0x1)

10:50:34 executing program 3:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

10:50:34 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000400000000", 0x32)

syzkaller login: [   24.503437][   T25] audit: type=1400 audit(1624877434.643:8): avc:  denied  { execmem } for  pid=1756 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   24.585919][ T1763] cgroup: Unknown subsys name 'perf_event'
[   24.611084][ T1763] cgroup: Unknown subsys name 'net_cls'
[   24.612958][ T1764] cgroup: Unknown subsys name 'perf_event'
[   24.631699][ T1764] cgroup: Unknown subsys name 'net_cls'
[   24.645986][ T1766] cgroup: Unknown subsys name 'perf_event'
[   24.659012][ T1769] cgroup: Unknown subsys name 'perf_event'
[   24.662228][ T1766] cgroup: Unknown subsys name 'net_cls'
[   24.666336][ T1769] cgroup: Unknown subsys name 'net_cls'
[   24.672465][ T1768] cgroup: Unknown subsys name 'perf_event'
[   24.683528][ T1771] cgroup: Unknown subsys name 'perf_event'
[   24.686360][ T1768] cgroup: Unknown subsys name 'net_cls'
[   24.700415][ T1771] cgroup: Unknown subsys name 'net_cls'
10:50:38 executing program 3:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

10:50:38 executing program 3:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

10:50:38 executing program 2:
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)='\x00', 0x1}], 0x1)

10:50:38 executing program 3:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

10:50:38 executing program 0:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000001740)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

10:50:38 executing program 2:
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)='\x00', 0x1}], 0x1)

10:50:38 executing program 2:
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)='\x00', 0x1}], 0x1)

10:50:39 executing program 1:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14)
ftruncate(r0, 0x1)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x6f52)
fallocate(r0, 0x1, 0x1008, 0x28120001)

10:50:41 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="e07fac12a0c0c89fd5269a"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

10:50:41 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000400000000", 0x32)

10:50:41 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x20002)
write$sndseq(r0, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)

10:50:41 executing program 2:
r0 = io_uring_setup(0x2eac, &(0x7f0000000440))
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
io_uring_setup(0x1e98, &(0x7f00000006c0)={0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:50:41 executing program 0:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000001740)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

10:50:41 executing program 1:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14)
ftruncate(r0, 0x1)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x6f52)
fallocate(r0, 0x1, 0x1008, 0x28120001)

10:50:41 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000400000000", 0x32)

10:50:41 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x20002)
write$sndseq(r0, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)

10:50:41 executing program 0:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000001740)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

10:50:41 executing program 2:
r0 = io_uring_setup(0x2eac, &(0x7f0000000440))
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
io_uring_setup(0x1e98, &(0x7f00000006c0)={0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:50:41 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000400000000", 0x32)

10:50:41 executing program 1:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14)
ftruncate(r0, 0x1)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x6f52)
fallocate(r0, 0x1, 0x1008, 0x28120001)

10:50:44 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x20002)
write$sndseq(r0, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)

10:50:44 executing program 2:
r0 = io_uring_setup(0x2eac, &(0x7f0000000440))
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
io_uring_setup(0x1e98, &(0x7f00000006c0)={0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:50:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="e07fac12a0c0c89fd5269a"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

10:50:44 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x45, 0xda1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x4b71, &(0x7f0000000040))

10:50:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:44 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x0, 0x80, 0x80, 0x0, 0x7, 0x20, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x1000, 0xaa6d, 0x6, 0x104040dcf02ba456, 0x5, 0x4, 0x200, 0x0, 0x40, 0x0, 0x5}, 0x0, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x8, 0x4, 0x0, 0xff, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x2, 0xffff5375, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001500)={<r3=>0x0, "0a10bbf742e6a9f14d7962f4b5f21c22"})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r3, 0x3, 0x3f})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x400)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000400)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd", 0x6a)
sendfile(r5, r6, 0x0, 0x1c500)

10:50:44 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x45, 0xda1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x4b71, &(0x7f0000000040))

10:50:44 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x20002)
write$sndseq(r0, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)

[   34.765246][ T4592] loop4: detected capacity change from 0 to 264192
10:50:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:45 executing program 2:
r0 = io_uring_setup(0x2eac, &(0x7f0000000440))
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
io_uring_setup(0x1e98, &(0x7f00000006c0)={0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[   34.873638][    C1] hrtimer: interrupt took 34241 ns
10:50:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x45, 0xda1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x4b71, &(0x7f0000000040))

10:50:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:47 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="e07fac12a0c0c89fd5269a"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

10:50:47 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x13e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

10:50:47 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x45, 0xda1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x4b71, &(0x7f0000000040))

10:50:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:47 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x0, 0x80, 0x80, 0x0, 0x7, 0x20, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x1000, 0xaa6d, 0x6, 0x104040dcf02ba456, 0x5, 0x4, 0x200, 0x0, 0x40, 0x0, 0x5}, 0x0, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x8, 0x4, 0x0, 0xff, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x2, 0xffff5375, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001500)={<r3=>0x0, "0a10bbf742e6a9f14d7962f4b5f21c22"})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r3, 0x3, 0x3f})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x400)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000400)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd", 0x6a)
sendfile(r5, r6, 0x0, 0x1c500)

10:50:47 executing program 1:
syslog(0x2, 0x0, 0x0)

10:50:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4c}, {0x6, 0x0, 0x0, 0x7fffffff}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

10:50:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

[   37.787851][ T4636] loop4: detected capacity change from 0 to 264192
10:50:48 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_pts(0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="24000000150007031dfffd946fa2830014000a0009000000741d8568201ba3a20400ff7e280000002500ff21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f0000000000", 0x4c}], 0x1}, 0x0)

10:50:48 executing program 1:
syslog(0x2, 0x0, 0x0)

10:50:48 executing program 3:
openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)={0x0, 0x0, 0x9}, 0x18)

[   37.906111][ T4662] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
10:50:50 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x0, 0x80, 0x80, 0x0, 0x7, 0x20, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x1000, 0xaa6d, 0x6, 0x104040dcf02ba456, 0x5, 0x4, 0x200, 0x0, 0x40, 0x0, 0x5}, 0x0, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x8, 0x4, 0x0, 0xff, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x2, 0xffff5375, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001500)={<r3=>0x0, "0a10bbf742e6a9f14d7962f4b5f21c22"})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r3, 0x3, 0x3f})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x400)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000400)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd", 0x6a)
sendfile(r5, r6, 0x0, 0x1c500)

10:50:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

10:50:50 executing program 1:
syslog(0x2, 0x0, 0x0)

10:50:50 executing program 3:
openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)={0x0, 0x0, 0x9}, 0x18)

10:50:50 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_pts(0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="24000000150007031dfffd946fa2830014000a0009000000741d8568201ba3a20400ff7e280000002500ff21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f0000000000", 0x4c}], 0x1}, 0x0)

10:50:50 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

10:50:50 executing program 3:
openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)={0x0, 0x0, 0x9}, 0x18)

10:50:50 executing program 1:
syslog(0x2, 0x0, 0x0)

10:50:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

[   40.812458][ T4690] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[   40.830130][ T4692] loop4: detected capacity change from 0 to 264192
10:50:51 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

10:50:51 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

10:50:51 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:51 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x0, 0x80, 0x80, 0x0, 0x7, 0x20, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x1000, 0xaa6d, 0x6, 0x104040dcf02ba456, 0x5, 0x4, 0x200, 0x0, 0x40, 0x0, 0x5}, 0x0, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x8, 0x4, 0x0, 0xff, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x2, 0xffff5375, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001500)={<r3=>0x0, "0a10bbf742e6a9f14d7962f4b5f21c22"})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r3, 0x3, 0x3f})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x400)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000400)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd", 0x6a)
sendfile(r5, r6, 0x0, 0x1c500)

10:50:51 executing program 3:
openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)={0x0, 0x0, 0x9}, 0x18)

10:50:51 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001140)=""/228, 0xe4)
getdents(r0, 0x0, 0x46)

10:50:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_pts(0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="24000000150007031dfffd946fa2830014000a0009000000741d8568201ba3a20400ff7e280000002500ff21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f0000000000", 0x4c}], 0x1}, 0x0)

10:50:51 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea9", 0x90)

10:50:51 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9", 0x88}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
exit_group(0x0)

10:50:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_pts(0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="24000000150007031dfffd946fa2830014000a0009000000741d8568201ba3a20400ff7e280000002500ff21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f0000000000", 0x4c}], 0x1}, 0x0)

10:50:51 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9", 0x88}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
exit_group(0x0)

[   41.365545][ T4727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[   41.398753][ T4739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
10:50:51 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:51 executing program 3:
socket(0x10, 0x2, 0x0)
r0 = syz_io_uring_setup(0x57d5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0)

10:50:51 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea9", 0x90)

[   41.426419][ T4745] loop4: detected capacity change from 0 to 264192
10:50:51 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:52 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:52 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9", 0x88}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
exit_group(0x0)

10:50:52 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea9", 0x90)

10:50:52 executing program 3:
socket(0x10, 0x2, 0x0)
r0 = syz_io_uring_setup(0x57d5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0)

10:50:52 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:52 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:52 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea9", 0x90)

10:50:52 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9", 0x88}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x3a)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
exit_group(0x0)

10:50:52 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:52 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:52 executing program 3:
socket(0x10, 0x2, 0x0)
r0 = syz_io_uring_setup(0x57d5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0)

10:50:52 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:52 executing program 3:
socket(0x10, 0x2, 0x0)
r0 = syz_io_uring_setup(0x57d5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0)

10:50:52 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:52 executing program 2:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:52 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:53 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:53 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00)

10:50:53 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400, "ed105400000000003ec1010000003bab137ccff52b01001f417adb7ec6399700"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="47ec75e7", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="9c"], 0xa0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

10:50:53 executing program 2:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:53 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:53 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00)

10:50:53 executing program 5:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:53 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00)

10:50:53 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:53 executing program 2:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:53 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00)

10:50:53 executing program 5:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:53 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x10}}], 0x30}], 0x1, 0x0)

10:50:53 executing program 2:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:53 executing program 5:
clone(0x20022004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = gettid()
clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x20000c)
wait4(0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x34)

10:50:53 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x420000a7b, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10:50:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x10}}], 0x30}], 0x1, 0x0)

10:50:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x10}}], 0x30}], 0x1, 0x0)

10:50:53 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x10}}], 0x30}], 0x1, 0x0)

10:50:54 executing program 3:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

10:50:54 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "046d20c700000000782650ed9660be9300"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6819)
ioctl$TCFLSH(r1, 0x540b, 0x2)

10:50:54 executing program 1:
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140))

[   44.388371][   T25] audit: type=1326 audit(1624877454.535:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4955 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.427146][   T25] audit: type=1326 audit(1624877454.535:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4955 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=56 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.457966][   T25] audit: type=1326 audit(1624877454.535:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4955 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.482043][   T25] audit: type=1326 audit(1624877454.535:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4955 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=61 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.506216][   T25] audit: type=1326 audit(1624877454.555:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.530484][   T25] audit: type=1326 audit(1624877454.555:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.554569][   T25] audit: type=1326 audit(1624877454.555:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000
10:50:54 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 1:
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140))

10:50:54 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "046d20c700000000782650ed9660be9300"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6819)
ioctl$TCFLSH(r1, 0x540b, 0x2)

10:50:54 executing program 3:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

10:50:54 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 0:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

10:50:54 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "046d20c700000000782650ed9660be9300"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6819)
ioctl$TCFLSH(r1, 0x540b, 0x2)

[   44.578425][   T25] audit: type=1326 audit(1624877454.555:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=200 compat=0 ip=0x4665d9 code=0x7ffc0000
[   44.602770][   T25] audit: type=1326 audit(1624877454.555:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4955 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000
10:50:54 executing program 1:
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140))

10:50:54 executing program 3:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

10:50:54 executing program 0:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

10:50:54 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "046d20c700000000782650ed9660be9300"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6819)
ioctl$TCFLSH(r1, 0x540b, 0x2)

10:50:54 executing program 1:
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140))

10:50:54 executing program 0:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

10:50:54 executing program 3:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

[   44.715872][   T25] audit: type=1326 audit(1624877454.555:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4955 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=85 compat=0 ip=0x4665d9 code=0x7ffc0000
10:50:54 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 5:
r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
io_uring_enter(r0, 0x67ce, 0x0, 0x0, 0x0, 0x0)

10:50:54 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x50, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "31aa898c69d64d23e20d7e94d7c26bf5bd1cb5690ce20f843765bc96487fd2763c0da75c293f3afd10a1b6bd523d01ea0635e5d42ae361cc0a2a79bacf5210bc33114e4b1fb0021cecc4a6cefeda675d"}, 0xd8)
close(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103, "ed105400000000003ec13e2000"})

10:50:54 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x34)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

10:50:54 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
setfsgid(0x0)

10:50:55 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)

10:50:55 executing program 5:
r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
io_uring_enter(r0, 0x67ce, 0x0, 0x0, 0x0, 0x0)

10:50:55 executing program 4:
r0 = syz_io_uring_setup(0x70c0, &(0x7f0000000240), &(0x7f0000836000/0x2000)=nil, &(0x7f0000c3d000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x8)
r3 = dup(r0)
io_uring_enter(r3, 0x3ef4, 0x0, 0x0, 0x0, 0x0)

10:50:55 executing program 2:
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
getpid()
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
sched_setscheduler(0x0, 0x3, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r1 = socket$netlink(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xac95, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"})
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
dup(r3)
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0xab4d403]}, 0x8, 0x80800)
socket$inet_tcp(0x2, 0x1, 0x0)

10:50:55 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
setfsgid(0x0)

10:50:55 executing program 4:
r0 = syz_io_uring_setup(0x70c0, &(0x7f0000000240), &(0x7f0000836000/0x2000)=nil, &(0x7f0000c3d000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x8)
r3 = dup(r0)
io_uring_enter(r3, 0x3ef4, 0x0, 0x0, 0x0, 0x0)

10:50:55 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)

[   44.938807][  T588] ==================================================================
[   44.946903][  T588] BUG: KCSAN: data-race in __process_echoes / n_tty_receive_char_special
[   44.955313][  T588] 
[   44.957622][  T588] write to 0xffffc9000016684a of 1 bytes by task 5058 on cpu 0:
[   44.965231][  T588]  n_tty_receive_char_special+0x17ae/0x3ac0
[   44.971120][  T588]  n_tty_receive_buf_common+0xe0c/0x1e20
[   44.976761][  T588]  n_tty_receive_buf+0x2b/0x40
[   44.981617][  T588]  tty_ioctl+0x968/0x1120
[   44.985957][  T588]  __se_sys_ioctl+0xcb/0x140
[   44.990537][  T588]  __x64_sys_ioctl+0x3f/0x50
[   44.995120][  T588]  do_syscall_64+0x4a/0x90
[   44.999530][  T588]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   45.005468][  T588] 
[   45.007774][  T588] read to 0xffffc9000016684a of 1 bytes by task 588 on cpu 1:
[   45.015297][  T588]  __process_echoes+0xd6/0x660
[   45.020048][  T588]  n_tty_receive_buf_common+0x14ad/0x1e20
[   45.025748][  T588]  n_tty_receive_buf2+0x2e/0x40
[   45.030580][  T588]  tty_ldisc_receive_buf+0x5b/0xf0
[   45.035682][  T588]  tty_port_default_receive_buf+0x54/0x80
[   45.041394][  T588]  flush_to_ldisc+0x1c5/0x2c0
[   45.046079][  T588]  process_one_work+0x3e9/0x8f0
[   45.050917][  T588]  worker_thread+0x636/0xae0
[   45.055496][  T588]  kthread+0x1d0/0x1f0
[   45.059550][  T588]  ret_from_fork+0x1f/0x30
[   45.063949][  T588] 
[   45.066264][  T588] value changed: 0x08 -> 0x20
[   45.070918][  T588] 
[   45.073239][  T588] Reported by Kernel Concurrency Sanitizer on:
[   45.079370][  T588] CPU: 1 PID: 588 Comm: kworker/u4:2 Not tainted 5.13.0-syzkaller #0
10:50:55 executing program 5:
r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
io_uring_enter(r0, 0x67ce, 0x0, 0x0, 0x0, 0x0)

[   45.087421][  T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   45.097452][  T588] Workqueue: events_unbound flush_to_ldisc
[   45.103245][  T588] ==================================================================
10:50:55 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
setfsgid(0x0)

10:50:55 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x50, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "31aa898c69d64d23e20d7e94d7c26bf5bd1cb5690ce20f843765bc96487fd2763c0da75c293f3afd10a1b6bd523d01ea0635e5d42ae361cc0a2a79bacf5210bc33114e4b1fb0021cecc4a6cefeda675d"}, 0xd8)
close(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103, "ed105400000000003ec13e2000"})

10:50:55 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)

10:50:55 executing program 2:
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
getpid()
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
sched_setscheduler(0x0, 0x3, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r1 = socket$netlink(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xac95, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"})
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
dup(r3)
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0xab4d403]}, 0x8, 0x80800)
socket$inet_tcp(0x2, 0x1, 0x0)

10:50:55 executing program 4:
r0 = syz_io_uring_setup(0x70c0, &(0x7f0000000240), &(0x7f0000836000/0x2000)=nil, &(0x7f0000c3d000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x8)
r3 = dup(r0)
io_uring_enter(r3, 0x3ef4, 0x0, 0x0, 0x0, 0x0)

10:50:55 executing program 5:
r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
io_uring_enter(r0, 0x67ce, 0x0, 0x0, 0x0, 0x0)

10:50:55 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
setfsgid(0x0)

10:50:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:55 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, '[)'}}, {@cache_none}], [], 0x6b}})

10:50:55 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)

10:50:55 executing program 2:
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
getpid()
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
sched_setscheduler(0x0, 0x3, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r1 = socket$netlink(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xac95, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"})
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
dup(r3)
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0xab4d403]}, 0x8, 0x80800)
socket$inet_tcp(0x2, 0x1, 0x0)

10:50:55 executing program 4:
r0 = syz_io_uring_setup(0x70c0, &(0x7f0000000240), &(0x7f0000836000/0x2000)=nil, &(0x7f0000c3d000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x8)
r3 = dup(r0)
io_uring_enter(r3, 0x3ef4, 0x0, 0x0, 0x0, 0x0)

10:50:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:55 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x50, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "31aa898c69d64d23e20d7e94d7c26bf5bd1cb5690ce20f843765bc96487fd2763c0da75c293f3afd10a1b6bd523d01ea0635e5d42ae361cc0a2a79bacf5210bc33114e4b1fb0021cecc4a6cefeda675d"}, 0xd8)
close(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103, "ed105400000000003ec13e2000"})

10:50:55 executing program 0:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:55 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, '[)'}}, {@cache_none}], [], 0x6b}})

10:50:55 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x62, 0x0)

10:50:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:55 executing program 2:
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
getpid()
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
sched_setscheduler(0x0, 0x3, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r1 = socket$netlink(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xac95, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"})
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
dup(r3)
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0xab4d403]}, 0x8, 0x80800)
socket$inet_tcp(0x2, 0x1, 0x0)

10:50:55 executing program 0:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:55 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, '[)'}}, {@cache_none}], [], 0x6b}})

10:50:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:55 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x62, 0x0)

10:50:55 executing program 0:
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x5bc, &(0x7f00000004c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580))

10:50:56 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x7c}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

10:50:56 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x50, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "31aa898c69d64d23e20d7e94d7c26bf5bd1cb5690ce20f843765bc96487fd2763c0da75c293f3afd10a1b6bd523d01ea0635e5d42ae361cc0a2a79bacf5210bc33114e4b1fb0021cecc4a6cefeda675d"}, 0xd8)
close(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103, "ed105400000000003ec13e2000"})

10:50:56 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@uname={'uname', 0x3d, '[)'}}, {@cache_none}], [], 0x6b}})

10:50:56 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

10:50:56 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x62, 0x0)

10:50:56 executing program 0:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x830001d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

10:50:56 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x7c}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

10:50:56 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x7c}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

10:50:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone3(&(0x7f0000000000)={0x40020400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x15}, 0x58)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

10:50:56 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10)
write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24)

10:50:56 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x62, 0x0)

10:50:56 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x7c}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

10:50:56 executing program 0:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x830001d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

10:50:56 executing program 0:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x830001d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

10:50:56 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10)
write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24)

10:50:56 executing program 5:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f000080b000/0x1000)=nil, 0x1000)

10:50:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0xc}, {0x6}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)

10:50:56 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4c20, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1fc5}}], 0x18}, 0x0)

10:50:56 executing program 5:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f000080b000/0x1000)=nil, 0x1000)

10:50:56 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10)
write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24)

10:50:59 executing program 0:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x830001d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

10:50:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4c20, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1fc5}}], 0x18}, 0x0)

10:50:59 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10)
write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000700feffffff0800000000000000", 0x24)

10:50:59 executing program 5:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f000080b000/0x1000)=nil, 0x1000)

10:50:59 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone3(&(0x7f0000000000)={0x40020400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x15}, 0x58)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

10:50:59 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0xc}, {0x6}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)

10:50:59 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0xc}, {0x6}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)

10:50:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4c20, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1fc5}}], 0x18}, 0x0)

10:50:59 executing program 5:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f000080b000/0x1000)=nil, 0x1000)

10:50:59 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x2)
readahead(r0, 0x0, 0x0)

10:50:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4c20, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1fc5}}], 0x18}, 0x0)

10:50:59 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89a3, &(0x7f0000000000))

10:50:59 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x2)
readahead(r0, 0x0, 0x0)

10:50:59 executing program 1:
r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000021b000/0x4000)=nil, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

10:50:59 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89a3, &(0x7f0000000000))

10:50:59 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x2)
readahead(r0, 0x0, 0x0)

10:51:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone3(&(0x7f0000000000)={0x40020400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x15}, 0x58)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

10:51:02 executing program 1:
r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000021b000/0x4000)=nil, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

10:51:02 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x2)
readahead(r0, 0x0, 0x0)

10:51:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89a3, &(0x7f0000000000))

10:51:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0xc}, {0x6}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)

10:51:02 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25}, {0xc}, {0x6}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)

10:51:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89a3, &(0x7f0000000000))

10:51:02 executing program 1:
r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000021b000/0x4000)=nil, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)

[   52.241617][   T25] kauditd_printk_skb: 106 callbacks suppressed
[   52.241633][   T25] audit: type=1326 audit(1624877462.385:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5372 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
10:51:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89a3, &(0x7f0000000000))

10:51:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r1, 0x89a3, &(0x7f0000000000))

[   52.318742][   T25] audit: type=1326 audit(1624877462.395:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5375 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
10:51:02 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fsopen(&(0x7f0000001ac0)='sockfs\x00', 0x0)

10:51:02 executing program 1:
r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000021b000/0x4000)=nil, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0)