[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. 2021/05/29 17:40:54 fuzzer started 2021/05/29 17:40:54 dialing manager at 10.128.0.163:35365 2021/05/29 17:40:55 syscalls: 1998 2021/05/29 17:40:55 code coverage: enabled 2021/05/29 17:40:55 comparison tracing: enabled 2021/05/29 17:40:55 extra coverage: enabled 2021/05/29 17:40:55 setuid sandbox: enabled 2021/05/29 17:40:55 namespace sandbox: enabled 2021/05/29 17:40:55 Android sandbox: enabled 2021/05/29 17:40:55 fault injection: enabled 2021/05/29 17:40:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/29 17:40:55 net packet injection: /dev/net/tun does not exist 2021/05/29 17:40:55 net device setup: enabled 2021/05/29 17:40:55 concurrency sanitizer: enabled 2021/05/29 17:40:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/29 17:40:55 USB emulation: /dev/raw-gadget does not exist 2021/05/29 17:40:55 hci packet injection: /dev/vhci does not exist 2021/05/29 17:40:55 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/05/29 17:40:55 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/05/29 17:40:56 suppressing KCSAN reports in functions: 'fast_dput' '__xa_clear_mark' 'test_clear_page_writeback' '__refrigerator' 'ext4_free_inodes_count' 'step_into' 'blk_mq_dispatch_rq_list' 'blk_mq_sched_dispatch_requests' 'do_readlinkat' '_find_next_bit' 'ext4_mb_good_group' 'lookup_fast' 'do_sys_poll' 'ps2_do_sendbyte' 'blk_mq_request_bypass_insert' '__ps2_command' 'do_nanosleep' 'dd_has_work' 'generic_write_end' 'exit_mm' 'tick_nohz_next_event' 'n_tty_receive_buf_common' 2021/05/29 17:40:56 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/29 17:40:56 fetching corpus: 50, signal 13922/17603 (executing program) 2021/05/29 17:40:56 fetching corpus: 100, signal 20260/25590 (executing program) 2021/05/29 17:40:56 fetching corpus: 150, signal 28141/34857 (executing program) 2021/05/29 17:40:56 fetching corpus: 200, signal 35956/43950 (executing program) 2021/05/29 17:40:56 fetching corpus: 250, signal 41294/50495 (executing program) 2021/05/29 17:40:56 fetching corpus: 300, signal 45329/55732 (executing program) 2021/05/29 17:40:56 fetching corpus: 350, signal 50297/61789 (executing program) 2021/05/29 17:40:56 fetching corpus: 400, signal 52479/65158 (executing program) 2021/05/29 17:40:56 fetching corpus: 450, signal 55775/69477 (executing program) 2021/05/29 17:40:56 fetching corpus: 500, signal 57992/72794 (executing program) 2021/05/29 17:40:56 fetching corpus: 550, signal 60817/76598 (executing program) 2021/05/29 17:40:56 fetching corpus: 600, signal 63372/80129 (executing program) 2021/05/29 17:40:56 fetching corpus: 650, signal 65272/83039 (executing program) 2021/05/29 17:40:56 fetching corpus: 699, signal 67480/86141 (executing program) 2021/05/29 17:40:56 fetching corpus: 749, signal 69247/88844 (executing program) 2021/05/29 17:40:56 fetching corpus: 799, signal 70415/91008 (executing program) 2021/05/29 17:40:56 fetching corpus: 849, signal 71622/93208 (executing program) 2021/05/29 17:40:56 fetching corpus: 898, signal 73976/96295 (executing program) 2021/05/29 17:40:56 fetching corpus: 948, signal 75242/98439 (executing program) 2021/05/29 17:40:56 fetching corpus: 997, signal 77619/101436 (executing program) 2021/05/29 17:40:56 fetching corpus: 1047, signal 79194/103769 (executing program) 2021/05/29 17:40:56 fetching corpus: 1097, signal 81196/106421 (executing program) 2021/05/29 17:40:57 fetching corpus: 1146, signal 82137/108208 (executing program) 2021/05/29 17:40:57 fetching corpus: 1195, signal 83648/110388 (executing program) 2021/05/29 17:40:57 fetching corpus: 1244, signal 87421/114149 (executing program) 2021/05/29 17:40:57 fetching corpus: 1294, signal 89839/116841 (executing program) 2021/05/29 17:40:57 fetching corpus: 1344, signal 92534/119730 (executing program) 2021/05/29 17:40:57 fetching corpus: 1394, signal 94254/121876 (executing program) 2021/05/29 17:40:57 fetching corpus: 1444, signal 95488/123667 (executing program) 2021/05/29 17:40:57 fetching corpus: 1494, signal 96639/125379 (executing program) 2021/05/29 17:40:57 fetching corpus: 1544, signal 97781/127045 (executing program) 2021/05/29 17:40:57 fetching corpus: 1594, signal 98790/128652 (executing program) 2021/05/29 17:40:57 fetching corpus: 1644, signal 100260/130474 (executing program) 2021/05/29 17:40:57 fetching corpus: 1694, signal 101517/132069 (executing program) 2021/05/29 17:40:57 fetching corpus: 1744, signal 102666/133640 (executing program) 2021/05/29 17:40:57 fetching corpus: 1793, signal 104245/135407 (executing program) 2021/05/29 17:40:57 fetching corpus: 1843, signal 105720/137110 (executing program) 2021/05/29 17:40:57 fetching corpus: 1892, signal 106625/138460 (executing program) 2021/05/29 17:40:57 fetching corpus: 1942, signal 107425/139706 (executing program) 2021/05/29 17:40:57 fetching corpus: 1991, signal 108147/140900 (executing program) 2021/05/29 17:40:57 fetching corpus: 2041, signal 109002/142124 (executing program) 2021/05/29 17:40:57 fetching corpus: 2091, signal 109699/143303 (executing program) 2021/05/29 17:40:57 fetching corpus: 2141, signal 114642/146595 (executing program) 2021/05/29 17:40:57 fetching corpus: 2191, signal 116524/148294 (executing program) 2021/05/29 17:40:57 fetching corpus: 2239, signal 117802/149583 (executing program) 2021/05/29 17:40:57 fetching corpus: 2289, signal 118624/150682 (executing program) 2021/05/29 17:40:57 fetching corpus: 2339, signal 119618/151817 (executing program) 2021/05/29 17:40:57 fetching corpus: 2389, signal 120350/152816 (executing program) 2021/05/29 17:40:57 fetching corpus: 2439, signal 120982/153813 (executing program) 2021/05/29 17:40:57 fetching corpus: 2489, signal 121715/154783 (executing program) 2021/05/29 17:40:58 fetching corpus: 2539, signal 122427/155749 (executing program) 2021/05/29 17:40:58 fetching corpus: 2589, signal 122902/156581 (executing program) 2021/05/29 17:40:58 fetching corpus: 2639, signal 123928/157639 (executing program) 2021/05/29 17:40:58 fetching corpus: 2689, signal 124915/158667 (executing program) 2021/05/29 17:40:58 fetching corpus: 2739, signal 125695/159601 (executing program) 2021/05/29 17:40:58 fetching corpus: 2789, signal 126851/160624 (executing program) 2021/05/29 17:40:58 fetching corpus: 2839, signal 127664/161499 (executing program) 2021/05/29 17:40:58 fetching corpus: 2889, signal 128394/162322 (executing program) 2021/05/29 17:40:58 fetching corpus: 2939, signal 129004/163136 (executing program) 2021/05/29 17:40:58 fetching corpus: 2988, signal 130258/164083 (executing program) 2021/05/29 17:40:58 fetching corpus: 3038, signal 131463/164969 (executing program) 2021/05/29 17:40:58 fetching corpus: 3088, signal 132185/165686 (executing program) 2021/05/29 17:40:58 fetching corpus: 3138, signal 132796/166382 (executing program) 2021/05/29 17:40:58 fetching corpus: 3188, signal 133310/167069 (executing program) 2021/05/29 17:40:58 fetching corpus: 3238, signal 133903/167771 (executing program) 2021/05/29 17:40:58 fetching corpus: 3288, signal 134424/168423 (executing program) 2021/05/29 17:40:58 fetching corpus: 3338, signal 136698/169467 (executing program) 2021/05/29 17:40:58 fetching corpus: 3387, signal 137515/170144 (executing program) 2021/05/29 17:40:58 fetching corpus: 3437, signal 138314/170766 (executing program) 2021/05/29 17:40:58 fetching corpus: 3487, signal 139054/171346 (executing program) 2021/05/29 17:40:58 fetching corpus: 3536, signal 140386/172027 (executing program) 2021/05/29 17:40:58 fetching corpus: 3586, signal 141024/172634 (executing program) 2021/05/29 17:40:58 fetching corpus: 3636, signal 141570/173172 (executing program) 2021/05/29 17:40:58 fetching corpus: 3686, signal 142026/173700 (executing program) 2021/05/29 17:40:58 fetching corpus: 3736, signal 142651/174249 (executing program) 2021/05/29 17:40:58 fetching corpus: 3786, signal 143234/174705 (executing program) 2021/05/29 17:40:58 fetching corpus: 3836, signal 143845/175190 (executing program) 2021/05/29 17:40:58 fetching corpus: 3886, signal 144446/175640 (executing program) 2021/05/29 17:40:59 fetching corpus: 3936, signal 144978/176112 (executing program) 2021/05/29 17:40:59 fetching corpus: 3986, signal 145347/176501 (executing program) 2021/05/29 17:40:59 fetching corpus: 4036, signal 146501/176983 (executing program) 2021/05/29 17:40:59 fetching corpus: 4086, signal 147286/177405 (executing program) 2021/05/29 17:40:59 fetching corpus: 4136, signal 149512/177918 (executing program) 2021/05/29 17:40:59 fetching corpus: 4186, signal 149994/178250 (executing program) 2021/05/29 17:40:59 fetching corpus: 4236, signal 150451/178614 (executing program) 2021/05/29 17:40:59 fetching corpus: 4286, signal 151199/178937 (executing program) 2021/05/29 17:40:59 fetching corpus: 4336, signal 151844/179265 (executing program) 2021/05/29 17:40:59 fetching corpus: 4386, signal 152582/179572 (executing program) 2021/05/29 17:40:59 fetching corpus: 4436, signal 153006/179832 (executing program) 2021/05/29 17:40:59 fetching corpus: 4486, signal 153548/179842 (executing program) 2021/05/29 17:40:59 fetching corpus: 4536, signal 153856/179842 (executing program) 2021/05/29 17:40:59 fetching corpus: 4586, signal 154408/179895 (executing program) 2021/05/29 17:40:59 fetching corpus: 4636, signal 154820/179895 (executing program) 2021/05/29 17:40:59 fetching corpus: 4686, signal 155301/179895 (executing program) 2021/05/29 17:40:59 fetching corpus: 4736, signal 156209/179898 (executing program) 2021/05/29 17:40:59 fetching corpus: 4786, signal 157298/179898 (executing program) 2021/05/29 17:40:59 fetching corpus: 4836, signal 157693/179898 (executing program) 2021/05/29 17:40:59 fetching corpus: 4886, signal 158385/179901 (executing program) 2021/05/29 17:40:59 fetching corpus: 4936, signal 158808/179901 (executing program) 2021/05/29 17:40:59 fetching corpus: 4986, signal 159848/179901 (executing program) 2021/05/29 17:40:59 fetching corpus: 5036, signal 160371/179901 (executing program) 2021/05/29 17:40:59 fetching corpus: 5086, signal 161107/179906 (executing program) 2021/05/29 17:40:59 fetching corpus: 5136, signal 161626/179908 (executing program) 2021/05/29 17:40:59 fetching corpus: 5186, signal 162308/179908 (executing program) 2021/05/29 17:40:59 fetching corpus: 5236, signal 162904/179920 (executing program) 2021/05/29 17:40:59 fetching corpus: 5286, signal 163420/179920 (executing program) 2021/05/29 17:40:59 fetching corpus: 5336, signal 163881/179920 (executing program) 2021/05/29 17:41:00 fetching corpus: 5386, signal 164263/179920 (executing program) 2021/05/29 17:41:00 fetching corpus: 5436, signal 164712/179920 (executing program) 2021/05/29 17:41:00 fetching corpus: 5486, signal 165241/179929 (executing program) 2021/05/29 17:41:00 fetching corpus: 5536, signal 165738/179929 (executing program) 2021/05/29 17:41:00 fetching corpus: 5586, signal 166561/179929 (executing program) 2021/05/29 17:41:00 fetching corpus: 5636, signal 167156/179929 (executing program) 2021/05/29 17:41:00 fetching corpus: 5686, signal 167521/179929 (executing program) 2021/05/29 17:41:00 fetching corpus: 5736, signal 168077/179929 (executing program) 2021/05/29 17:41:00 fetching corpus: 5786, signal 168466/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 5835, signal 168798/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 5885, signal 169395/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 5935, signal 169712/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 5985, signal 170118/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6035, signal 170432/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6085, signal 170735/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6135, signal 171161/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6185, signal 171550/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6235, signal 171933/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6285, signal 172418/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6335, signal 172915/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6385, signal 173363/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6435, signal 173634/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6485, signal 174064/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6535, signal 174449/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6585, signal 175112/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6635, signal 175409/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6685, signal 175695/179930 (executing program) 2021/05/29 17:41:00 fetching corpus: 6735, signal 176036/179931 (executing program) 2021/05/29 17:41:00 fetching corpus: 6785, signal 176896/179931 (executing program) 2021/05/29 17:41:00 fetching corpus: 6835, signal 177265/179931 (executing program) 2021/05/29 17:41:00 fetching corpus: 6885, signal 177553/179931 (executing program) 2021/05/29 17:41:00 fetching corpus: 6935, signal 178165/179931 (executing program) 2021/05/29 17:41:01 fetching corpus: 6985, signal 178571/179931 (executing program) 2021/05/29 17:41:01 fetching corpus: 6991, signal 178619/179933 (executing program) 2021/05/29 17:41:01 fetching corpus: 6992, signal 178625/179933 (executing program) 2021/05/29 17:41:01 fetching corpus: 6992, signal 178625/179933 (executing program) 2021/05/29 17:41:02 starting 6 fuzzer processes 17:41:02 executing program 0: r0 = fork() ptrace$PTRACE_SECCOMP_GET_METADATA(0x8, r0, 0x0, 0x0) 17:41:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000080)={0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) 17:41:02 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:02 executing program 5: clone(0x103c0400, 0x0, 0x0, 0x0, 0x0) 17:41:02 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c11a448eb497c3e3c53f1fab7d652fe3f5f47c19680532dc8a190e522fe2f99859d8b1ebeb5113b7ee64dd6215e563ef2ce8f28e89e5796e91ec09ed16851", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) syzkaller login: [ 24.801379][ T25] audit: type=1400 audit(1622310062.463:8): avc: denied { execmem } for pid=1764 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 24.915733][ T1770] cgroup: Unknown subsys name 'perf_event' [ 24.936225][ T1771] cgroup: Unknown subsys name 'perf_event' [ 24.939923][ T1770] cgroup: Unknown subsys name 'net_cls' [ 24.942542][ T1772] cgroup: Unknown subsys name 'perf_event' [ 24.953684][ T1771] cgroup: Unknown subsys name 'net_cls' [ 24.965413][ T1772] cgroup: Unknown subsys name 'net_cls' [ 24.967810][ T1773] cgroup: Unknown subsys name 'perf_event' [ 24.972383][ T1776] cgroup: Unknown subsys name 'perf_event' [ 24.979560][ T1775] cgroup: Unknown subsys name 'perf_event' [ 24.985835][ T1776] cgroup: Unknown subsys name 'net_cls' [ 24.991235][ T1773] cgroup: Unknown subsys name 'net_cls' [ 24.998507][ T1775] cgroup: Unknown subsys name 'net_cls' 17:41:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 17:41:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000080)={0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) 17:41:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 17:41:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000080)={0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) 17:41:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 17:41:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000080)={0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) 17:41:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 17:41:06 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c11a448eb497c3e3c53f1fab7d652fe3f5f47c19680532dc8a190e522fe2f99859d8b1ebeb5113b7ee64dd6215e563ef2ce8f28e89e5796e91ec09ed16851", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:41:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:06 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:06 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c11a448eb497c3e3c53f1fab7d652fe3f5f47c19680532dc8a190e522fe2f99859d8b1ebeb5113b7ee64dd6215e563ef2ce8f28e89e5796e91ec09ed16851", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:41:06 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c11a448eb497c3e3c53f1fab7d652fe3f5f47c19680532dc8a190e522fe2f99859d8b1ebeb5113b7ee64dd6215e563ef2ce8f28e89e5796e91ec09ed16851", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:41:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:07 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:07 executing program 3: r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) syz_mount_image$msdos(0x0, &(0x7f0000001580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x200) 17:41:07 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port1\x00'}) 17:41:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, 0x0, 0x0, 0x0) 17:41:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:07 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f42400090c000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:41:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x1020, &(0x7f0000000500)) 17:41:07 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:07 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000576000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:41:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x1020, &(0x7f0000000500)) 17:41:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x1020, &(0x7f0000000500)) 17:41:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x1020, &(0x7f0000000500)) 17:41:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) 17:41:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0a85322, &(0x7f00000003c0)={{0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000340)) tkill(r1, 0x7) 17:41:07 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x7310, &(0x7f0000000040), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1d94, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:41:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 17:41:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) 17:41:08 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:08 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000576000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:41:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 17:41:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) 17:41:08 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x7310, &(0x7f0000000040), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1d94, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:41:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 17:41:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 17:41:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) 17:41:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 17:41:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 17:41:08 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x103, 0xff4032990e2cb6a5) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) [ 30.689578][ T4782] ================================================================== [ 30.697658][ T4782] BUG: KCSAN: data-race in futex_wait_queue_me / io_req_task_work_add [ 30.705903][ T4782] [ 30.708207][ T4782] write to 0xffff888100b0902c of 4 bytes by task 4784 on cpu 1: [ 30.715841][ T4782] futex_wait_queue_me+0x198/0x260 [ 30.720943][ T4782] futex_wait+0x143/0x430 [ 30.725257][ T4782] do_futex+0x9d8/0x1ee0 [ 30.729475][ T4782] __se_sys_futex+0x21c/0x380 [ 30.734129][ T4782] __x64_sys_futex+0x74/0x80 [ 30.738697][ T4782] do_syscall_64+0x4a/0x90 [ 30.743092][ T4782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 30.748966][ T4782] [ 30.751269][ T4782] read to 0xffff888100b0902c of 4 bytes by task 4782 on cpu 0: [ 30.758790][ T4782] io_req_task_work_add+0x3f/0x310 [ 30.763880][ T4782] io_poll_remove_all+0x4b5/0x670 [ 30.768883][ T4782] io_ring_ctx_wait_and_kill+0x15c/0x210 [ 30.774751][ T4782] io_uring_release+0x3e/0x50 [ 30.779498][ T4782] __fput+0x25b/0x4e0 [ 30.783459][ T4782] ____fput+0x11/0x20 [ 30.787615][ T4782] task_work_run+0xae/0x130 [ 30.792093][ T4782] exit_to_user_mode_prepare+0x156/0x190 [ 30.797705][ T4782] syscall_exit_to_user_mode+0x20/0x40 [ 30.803162][ T4782] do_syscall_64+0x56/0x90 [ 30.807576][ T4782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 30.813694][ T4782] [ 30.816094][ T4782] value changed: 0x00404140 -> 0x40404140 [ 30.821995][ T4782] [ 30.824308][ T4782] Reported by Kernel Concurrency Sanitizer on: [ 30.830429][ T4782] CPU: 0 PID: 4782 Comm: syz-executor.2 Not tainted 5.13.0-rc3-syzkaller #0 [ 30.839252][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.849286][ T4782] ================================================================== 17:41:09 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:09 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000576000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:41:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) 17:41:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:09 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x7310, &(0x7f0000000040), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1d94, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:41:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) 17:41:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) 17:41:09 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) 17:41:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 17:41:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) [ 31.566009][ C0] hrtimer: interrupt took 23312 ns 17:41:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 17:41:09 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:09 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000576000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:41:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 17:41:09 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x7310, &(0x7f0000000040), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1d94, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 17:41:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x4000, @private0={0xfc, 0x0, '\x00', 0x81}, 0x3}}, {{0xa, 0x4e22, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70eb}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x1f2b552}}, {{0xa, 0x4e24, 0x30, @private2, 0x9}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}}, {{0xa, 0x4e24, 0x2a5, @private2, 0x1}}, {{0xa, 0x4e22, 0x4, @private0, 0x3f}}]}, 0x490) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@srh, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:41:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002800)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x8014) 17:41:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) 17:41:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002800)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x8014) 17:41:10 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a497602000000b18f6e2e2aba0000002e0b7836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff02000000f6db027d9506ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 17:41:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) [ 33.155618][ T4960] loop0: detected capacity change from 0 to 16 17:41:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002800)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x8014) 17:41:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002800)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x8014) 17:41:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) [ 33.259721][ T4980] loop0: detected capacity change from 0 to 16 17:41:11 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 17:41:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xa2) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @nfc, @can, @nfc}) 17:41:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) [ 33.342994][ T4990] loop0: detected capacity change from 0 to 16 [ 33.452292][ T5010] loop0: detected capacity change from 0 to 16 17:41:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x801) r0 = syz_io_uring_setup(0x85, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) setregid(0xee01, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 17:41:11 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x3, 0x3, 0x80}) 17:41:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:11 executing program 3: set_mempolicy(0x1, &(0x7f0000000080)=0x4000005bc32d49, 0x5) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) 17:41:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x801) r0 = syz_io_uring_setup(0x85, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) setregid(0xee01, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 17:41:11 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x3, 0x3, 0x80}) 17:41:11 executing program 3: set_mempolicy(0x1, &(0x7f0000000080)=0x4000005bc32d49, 0x5) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) 17:41:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) syz_open_dev$evdev(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x802) readv(r2, &(0x7f0000000b80), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000002c0)="da2f14d797e80c1d9358b39a927d78a125be05255b125aadf897592c8650a43f0427eb14b38870ffc8db3427abb21c72ea4df54587fa028f59283c34ffe7ad3282cd7e64f8d6642d97706b4fd4d480975b822bc834e595b0af2a28dca3729335c07186a64f647a3d12aa5f9e264eb137508109165946df1b713245fbb1867e4c6085dc7092aa74f1247b8287c60a59dd63f38091eeb0c1644e90580f49601f3acece7cbcd7887a379229d3a8a8e94c12441ec69efbc21146677c6f9fd03583fd05ebdf4214a28afe0321d265c975566caf7698897327", 0xd6}], 0x2, 0x1) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17:41:11 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a497602000000b18f6e2e2aba0000002e0b7836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff02000000f6db027d9506ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 17:41:11 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 17:41:11 executing program 3: set_mempolicy(0x1, &(0x7f0000000080)=0x4000005bc32d49, 0x5) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) 17:41:11 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x3, 0x3, 0x80}) 17:41:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x801) r0 = syz_io_uring_setup(0x85, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) setregid(0xee01, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 17:41:11 executing program 3: set_mempolicy(0x1, &(0x7f0000000080)=0x4000005bc32d49, 0x5) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) 17:41:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x801) r0 = syz_io_uring_setup(0x85, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) setregid(0xee01, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 17:41:11 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x3, 0x3, 0x80}) 17:41:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0x0, 0x3, 0x1000004}) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20050080, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r2, 0x1) r3 = accept(r0, 0x0, 0x0) close(r3) 17:41:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) 17:41:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xc, 0x0, &(0x7f0000000380)) 17:41:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {0x61}, {0x6}]}) [ 34.279243][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 34.301473][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 34.335189][ T25] audit: type=1326 audit(1622310071.997:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5095 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 17:41:12 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a497602000000b18f6e2e2aba0000002e0b7836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff02000000f6db027d9506ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 17:41:12 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 17:41:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) 17:41:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xc, 0x0, &(0x7f0000000380)) 17:41:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0x0, 0x3, 0x1000004}) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20050080, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r2, 0x1) r3 = accept(r0, 0x0, 0x0) close(r3) 17:41:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {0x61}, {0x6}]}) 17:41:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xc, 0x0, &(0x7f0000000380)) 17:41:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0x0, 0x3, 0x1000004}) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20050080, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r2, 0x1) r3 = accept(r0, 0x0, 0x0) close(r3) 17:41:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xc, 0x0, &(0x7f0000000380)) 17:41:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) 17:41:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {0x61}, {0x6}]}) [ 35.077448][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 35.088995][ T25] audit: type=1326 audit(1622310072.758:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5113 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 17:41:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 35.152594][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 35.172843][ T25] audit: type=1326 audit(1622310072.838:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5135 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 17:41:13 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a497602000000b18f6e2e2aba0000002e0b7836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff02000000f6db027d9506ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 17:41:13 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 17:41:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000500)="6653070094cb2767db007c321b1d9cf28ba4efd1189f256fe2bf57981c7eb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b38bc16668d2473e6a271c80fa2eb4a1ce603087a655a9dac584c615351d59db9e9ac54777419ad2a712d8f99b436ef9ba434f09638b070240a", 0x70}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 17:41:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0x0, 0x3, 0x1000004}) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20050080, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r2, 0x1) r3 = accept(r0, 0x0, 0x0) close(r3) 17:41:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='utf8=1,nonumtail=0']) 17:41:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {0x61}, {0x6}]}) [ 35.938019][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 35.951188][ T5165] FAT-fs (loop0): bogus number of reserved sectors [ 35.957859][ T5165] FAT-fs (loop0): Can't find a valid FAT filesystem 17:41:13 executing program 5: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='async\x00', &(0x7f00000000c0)="d7", 0x1) 17:41:13 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xd0, &(0x7f0000000380)="c4c6910199f7d9078a80253fd138a3368a793469569b144098d1e0a593b040f7629100f083310528ff64fc279675bb78da8aed164b19c82c8845a10001000000000000476c706d207f04eaa5ade9c3dc9e2160030758add630cd26ba926cc5f001f1d835b6b579c79bde98a354c12dea57b5ea1b7edeea3779f26c57e174111b31d187aa1a493934b52d99e00561a49660868922b0dff8948892362ecbba48c89aee3cc22db93e401f7e5d534034302b79a8ba381540de9e85156bcf4016302cbf859b072d163266188e5bfb77ef4805"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) [ 35.965241][ T25] audit: type=1326 audit(1622310073.628:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5158 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 17:41:13 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xd0, &(0x7f0000000380)="c4c6910199f7d9078a80253fd138a3368a793469569b144098d1e0a593b040f7629100f083310528ff64fc279675bb78da8aed164b19c82c8845a10001000000000000476c706d207f04eaa5ade9c3dc9e2160030758add630cd26ba926cc5f001f1d835b6b579c79bde98a354c12dea57b5ea1b7edeea3779f26c57e174111b31d187aa1a493934b52d99e00561a49660868922b0dff8948892362ecbba48c89aee3cc22db93e401f7e5d534034302b79a8ba381540de9e85156bcf4016302cbf859b072d163266188e5bfb77ef4805"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) [ 36.019417][ T25] audit: type=1326 audit(1622310073.678:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 36.048033][ T25] audit: type=1326 audit(1622310073.678:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=56 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 36.073920][ T5165] FAT-fs (loop0): bogus number of reserved sectors [ 36.080455][ T5165] FAT-fs (loop0): Can't find a valid FAT filesystem [ 36.087290][ T25] audit: type=1326 audit(1622310073.678:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 17:41:13 executing program 5: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='async\x00', &(0x7f00000000c0)="d7", 0x1) 17:41:13 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xd0, &(0x7f0000000380)="c4c6910199f7d9078a80253fd138a3368a793469569b144098d1e0a593b040f7629100f083310528ff64fc279675bb78da8aed164b19c82c8845a10001000000000000476c706d207f04eaa5ade9c3dc9e2160030758add630cd26ba926cc5f001f1d835b6b579c79bde98a354c12dea57b5ea1b7edeea3779f26c57e174111b31d187aa1a493934b52d99e00561a49660868922b0dff8948892362ecbba48c89aee3cc22db93e401f7e5d534034302b79a8ba381540de9e85156bcf4016302cbf859b072d163266188e5bfb77ef4805"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) [ 36.112223][ T25] audit: type=1326 audit(1622310073.678:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 36.138564][ T25] audit: type=1326 audit(1622310073.678:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 17:41:13 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xd0, &(0x7f0000000380)="c4c6910199f7d9078a80253fd138a3368a793469569b144098d1e0a593b040f7629100f083310528ff64fc279675bb78da8aed164b19c82c8845a10001000000000000476c706d207f04eaa5ade9c3dc9e2160030758add630cd26ba926cc5f001f1d835b6b579c79bde98a354c12dea57b5ea1b7edeea3779f26c57e174111b31d187aa1a493934b52d99e00561a49660868922b0dff8948892362ecbba48c89aee3cc22db93e401f7e5d534034302b79a8ba381540de9e85156bcf4016302cbf859b072d163266188e5bfb77ef4805"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) [ 36.162693][ T25] audit: type=1326 audit(1622310073.678:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x4665d9 code=0x7ffc0000 17:41:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 17:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002e00)=[{&(0x7f0000000040)="0201eeffffff0a00f2ffff45ac4000ff65ffee000800010000000000020094ffffbf82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 36.787615][ T5220] loop2: detected capacity change from 0 to 1 17:41:16 executing program 5: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='async\x00', &(0x7f00000000c0)="d7", 0x1) 17:41:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='utf8=1,nonumtail=0']) 17:41:16 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b03004302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) 17:41:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001140)=[{0x0, 0x0, 0xfffffffffffffffd}, {&(0x7f0000001000)="e0f762774cca5b9f6c11ed75fa", 0xd, 0x9}], 0x0, &(0x7f0000001240)) 17:41:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000500)="6653070094cb2767db007c321b1d9cf28ba4efd1189f256fe2bf57981c7eb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b38bc16668d2473e6a271c80fa2eb4a1ce603087a655a9dac584c615351d59db9e9ac54777419ad2a712d8f99b436ef9ba434f09638b070240a", 0x70}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 17:41:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002e00)=[{&(0x7f0000000040)="0201eeffffff0a00f2ffff45ac4000ff65ffee000800010000000000020094ffffbf82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 17:41:16 executing program 5: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='async\x00', &(0x7f00000000c0)="d7", 0x1) 17:41:16 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b03004302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) [ 38.943692][ T5231] loop2: detected capacity change from 0 to 1 [ 38.957170][ T5234] FAT-fs (loop0): bogus number of reserved sectors [ 38.959884][ T5238] loop4: detected capacity change from 0 to 16383 [ 38.963798][ T5234] FAT-fs (loop0): Can't find a valid FAT filesystem 17:41:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000002e00)=[{&(0x7f0000000040)="0201eeffffff0a00f2ffff45ac4000ff65ffee000800010000000000020094ffffbf82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 17:41:16 executing program 5: unshare(0x2000400) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) 17:41:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='utf8=1,nonumtail=0']) 17:41:16 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b03004302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) [ 38.998172][ T5238] FAT-fs (loop4): bogus logical sector size 30562 [ 39.004652][ T5238] FAT-fs (loop4): Can't find a valid FAT filesystem 17:41:16 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b03004302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) 17:41:16 executing program 5: unshare(0x2000400) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) [ 39.063129][ T5265] FAT-fs (loop0): bogus number of reserved sectors [ 39.069795][ T5265] FAT-fs (loop0): Can't find a valid FAT filesystem [ 39.091717][ T5238] loop4: detected capacity change from 0 to 16383 [ 39.098525][ T5238] FAT-fs (loop4): bogus logical sector size 30562 [ 39.104968][ T5238] FAT-fs (loop4): Can't find a valid FAT filesystem 17:41:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="e0114f99d0b9311b482263"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 39.113096][ T5279] loop2: detected capacity change from 0 to 1