Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts.
2021/05/22 03:34:39 fuzzer started
2021/05/22 03:34:39 dialing manager at 10.128.0.163:42059
2021/05/22 03:34:39 syscalls: 1997
2021/05/22 03:34:39 code coverage: enabled
2021/05/22 03:34:39 comparison tracing: enabled
2021/05/22 03:34:39 extra coverage: enabled
2021/05/22 03:34:39 setuid sandbox: enabled
2021/05/22 03:34:39 namespace sandbox: enabled
2021/05/22 03:34:39 Android sandbox: enabled
2021/05/22 03:34:39 fault injection: enabled
2021/05/22 03:34:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/05/22 03:34:39 net packet injection: /dev/net/tun does not exist
2021/05/22 03:34:39 net device setup: enabled
2021/05/22 03:34:39 concurrency sanitizer: enabled
2021/05/22 03:34:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/05/22 03:34:39 USB emulation: /dev/raw-gadget does not exist
2021/05/22 03:34:39 hci packet injection: /dev/vhci does not exist
2021/05/22 03:34:39 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2021/05/22 03:34:39 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2021/05/22 03:34:40 suppressing KCSAN reports in functions: '__xa_clear_mark' 'blk_mq_rq_ctx_init' 'ext4_free_inodes_count' 'ext4_mark_iloc_dirty' 'ext4_writepages' 'fast_dput' 'alloc_pid' 'blk_mq_dispatch_rq_list' 'do_readlinkat' '__send_signal' '_find_next_bit' 'blk_mq_sched_dispatch_requests' 'exit_mm' 'ext4_mb_good_group' 'do_signal_stop' 'n_tty_receive_char_special' 
2021/05/22 03:34:40 fetching corpus: 0, signal 0/2000 (executing program)
2021/05/22 03:34:40 fetching corpus: 49, signal 13488/17066 (executing program)
2021/05/22 03:34:40 fetching corpus: 99, signal 24618/29503 (executing program)
2021/05/22 03:34:40 fetching corpus: 149, signal 32944/38975 (executing program)
2021/05/22 03:34:40 fetching corpus: 199, signal 37347/44561 (executing program)
2021/05/22 03:34:40 fetching corpus: 249, signal 41079/49438 (executing program)
2021/05/22 03:34:40 fetching corpus: 299, signal 43942/53426 (executing program)
2021/05/22 03:34:40 fetching corpus: 349, signal 47919/58332 (executing program)
2021/05/22 03:34:40 fetching corpus: 399, signal 49727/61225 (executing program)
2021/05/22 03:34:40 fetching corpus: 449, signal 51750/64198 (executing program)
2021/05/22 03:34:40 fetching corpus: 499, signal 55791/68789 (executing program)
2021/05/22 03:34:40 fetching corpus: 549, signal 58723/72413 (executing program)
2021/05/22 03:34:41 fetching corpus: 599, signal 61936/76112 (executing program)
2021/05/22 03:34:41 fetching corpus: 649, signal 63675/78580 (executing program)
2021/05/22 03:34:41 fetching corpus: 699, signal 65870/81388 (executing program)
2021/05/22 03:34:41 fetching corpus: 749, signal 67815/83894 (executing program)
2021/05/22 03:34:41 fetching corpus: 799, signal 69682/86334 (executing program)
2021/05/22 03:34:41 fetching corpus: 849, signal 71392/88567 (executing program)
2021/05/22 03:34:41 fetching corpus: 899, signal 72994/90701 (executing program)
2021/05/22 03:34:41 fetching corpus: 948, signal 74718/92891 (executing program)
2021/05/22 03:34:41 fetching corpus: 998, signal 76628/95140 (executing program)
2021/05/22 03:34:41 fetching corpus: 1047, signal 78525/97280 (executing program)
2021/05/22 03:34:41 fetching corpus: 1097, signal 81054/99812 (executing program)
2021/05/22 03:34:41 fetching corpus: 1147, signal 82663/101627 (executing program)
2021/05/22 03:34:41 fetching corpus: 1197, signal 84179/103340 (executing program)
2021/05/22 03:34:41 fetching corpus: 1247, signal 86440/105541 (executing program)
2021/05/22 03:34:41 fetching corpus: 1297, signal 87685/107056 (executing program)
syzkaller login: [   20.052679][ T1756] ==================================================================
[   20.054460][ T1756] BUG: KCSAN: data-race in futex_wait_queue_me / prepare_signal
[   20.055780][ T1756] 
[   20.056134][ T1756] write to 0xffff88810472206c of 4 bytes by task 1748 on cpu 0:
[   20.057395][ T1756]  futex_wait_queue_me+0x198/0x260
[   20.058192][ T1756]  futex_wait+0x143/0x430
[   20.058918][ T1756]  do_futex+0x9d8/0x1ee0
[   20.059595][ T1756]  __se_sys_futex+0x21c/0x380
[   20.060288][ T1756]  __x64_sys_futex+0x74/0x80
[   20.061201][ T1756]  do_syscall_64+0x4a/0x90
[   20.062263][ T1756]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   20.063577][ T1756] 
[   20.064044][ T1756] read to 0xffff88810472206c of 4 bytes by task 1756 on cpu 1:
[   20.065222][ T1756]  prepare_signal+0x952/0xeb0
[   20.065889][ T1756]  __send_signal+0x64/0x760
[   20.066578][ T1756]  send_signal+0x281/0x390
[   20.067210][ T1756]  do_send_specific+0x13d/0x1c0
[   20.068354][ T1756]  __x64_sys_tgkill+0x108/0x140
[   20.069096][ T1756]  do_syscall_64+0x4a/0x90
[   20.070109][ T1756]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   20.071090][ T1756] 
[   20.071492][ T1756] Reported by Kernel Concurrency Sanitizer on:
[   20.072524][ T1756] CPU: 1 PID: 1756 Comm: syz-fuzzer Not tainted 5.13.0-rc2-syzkaller #0
[   20.077926][ T1756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   20.087966][ T1756] ==================================================================
2021/05/22 03:34:41 fetching corpus: 1347, signal 90052/109185 (executing program)
2021/05/22 03:34:41 fetching corpus: 1397, signal 91594/110734 (executing program)
2021/05/22 03:34:41 fetching corpus: 1447, signal 94025/112810 (executing program)
2021/05/22 03:34:41 fetching corpus: 1497, signal 94977/113976 (executing program)
2021/05/22 03:34:41 fetching corpus: 1547, signal 96314/115290 (executing program)
2021/05/22 03:34:41 fetching corpus: 1597, signal 97887/116649 (executing program)
2021/05/22 03:34:42 fetching corpus: 1647, signal 98783/117687 (executing program)
2021/05/22 03:34:42 fetching corpus: 1697, signal 101133/119401 (executing program)
2021/05/22 03:34:42 fetching corpus: 1747, signal 102095/120359 (executing program)
2021/05/22 03:34:42 fetching corpus: 1797, signal 103193/121349 (executing program)
2021/05/22 03:34:42 fetching corpus: 1847, signal 104390/122384 (executing program)
2021/05/22 03:34:42 fetching corpus: 1897, signal 104963/123094 (executing program)
2021/05/22 03:34:42 fetching corpus: 1947, signal 105756/123898 (executing program)
2021/05/22 03:34:42 fetching corpus: 1997, signal 108254/125357 (executing program)
2021/05/22 03:34:42 fetching corpus: 2047, signal 109131/126137 (executing program)
2021/05/22 03:34:42 fetching corpus: 2097, signal 110050/126871 (executing program)
2021/05/22 03:34:42 fetching corpus: 2147, signal 110871/127549 (executing program)
2021/05/22 03:34:42 fetching corpus: 2196, signal 111735/128198 (executing program)
2021/05/22 03:34:42 fetching corpus: 2244, signal 112897/128911 (executing program)
2021/05/22 03:34:42 fetching corpus: 2294, signal 113864/129524 (executing program)
2021/05/22 03:34:42 fetching corpus: 2344, signal 114881/130159 (executing program)
2021/05/22 03:34:42 fetching corpus: 2394, signal 115757/130734 (executing program)
2021/05/22 03:34:42 fetching corpus: 2444, signal 116398/131227 (executing program)
2021/05/22 03:34:42 fetching corpus: 2494, signal 117312/131753 (executing program)
2021/05/22 03:34:42 fetching corpus: 2544, signal 118155/132247 (executing program)
2021/05/22 03:34:42 fetching corpus: 2594, signal 119266/132784 (executing program)
2021/05/22 03:34:42 fetching corpus: 2644, signal 120034/133225 (executing program)
2021/05/22 03:34:43 fetching corpus: 2693, signal 120639/133596 (executing program)
2021/05/22 03:34:43 fetching corpus: 2743, signal 121638/134017 (executing program)
2021/05/22 03:34:43 fetching corpus: 2793, signal 123680/134595 (executing program)
2021/05/22 03:34:43 fetching corpus: 2843, signal 124662/134912 (executing program)
2021/05/22 03:34:43 fetching corpus: 2893, signal 125762/135260 (executing program)
2021/05/22 03:34:43 fetching corpus: 2943, signal 127276/135636 (executing program)
2021/05/22 03:34:43 fetching corpus: 2993, signal 128010/135879 (executing program)
2021/05/22 03:34:43 fetching corpus: 3043, signal 128918/136111 (executing program)
2021/05/22 03:34:43 fetching corpus: 3093, signal 129636/136287 (executing program)
2021/05/22 03:34:43 fetching corpus: 3143, signal 130605/136432 (executing program)
2021/05/22 03:34:43 fetching corpus: 3193, signal 131547/136563 (executing program)
2021/05/22 03:34:43 fetching corpus: 3243, signal 132994/136684 (executing program)
2021/05/22 03:34:43 fetching corpus: 3293, signal 133424/136745 (executing program)
2021/05/22 03:34:43 fetching corpus: 3343, signal 134155/136803 (executing program)
2021/05/22 03:34:43 fetching corpus: 3393, signal 134701/136820 (executing program)
2021/05/22 03:34:43 fetching corpus: 3443, signal 135292/136820 (executing program)
2021/05/22 03:34:43 fetching corpus: 3478, signal 135709/136820 (executing program)
2021/05/22 03:34:43 fetching corpus: 3478, signal 135709/136820 (executing program)
2021/05/22 03:34:45 starting 6 fuzzer processes
03:34:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
rseq(0x0, 0x0, 0x7, 0x0)

03:34:45 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KDGKBDIACR(r0, 0x5414, &(0x7f0000000140)=""/224)

03:34:45 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

03:34:45 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x4800)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

03:34:45 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000001580)=[{&(0x7f0000001600)=""/220, 0xdc}], 0x1, 0x5b, 0x0)

03:34:45 executing program 4:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x1)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
fallocate(r2, 0x0, 0x0, 0x10000101)
syz_open_procfs(0x0, 0x0)

[   23.640723][   T25] audit: type=1400 audit(1621654485.221:8): avc:  denied  { execmem } for  pid=1759 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   23.749089][ T1766] cgroup: Unknown subsys name 'perf_event'
[   23.767934][ T1766] cgroup: Unknown subsys name 'net_cls'
[   23.787753][ T1767] cgroup: Unknown subsys name 'perf_event'
[   23.788423][ T1768] cgroup: Unknown subsys name 'perf_event'
[   23.804922][ T1767] cgroup: Unknown subsys name 'net_cls'
[   23.810591][ T1770] cgroup: Unknown subsys name 'perf_event'
[   23.816691][ T1770] cgroup: Unknown subsys name 'net_cls'
[   23.829592][ T1768] cgroup: Unknown subsys name 'net_cls'
[   23.831338][ T1772] cgroup: Unknown subsys name 'perf_event'
[   23.842175][ T1772] cgroup: Unknown subsys name 'net_cls'
[   23.844828][ T1774] cgroup: Unknown subsys name 'perf_event'
[   23.854633][ T1774] cgroup: Unknown subsys name 'net_cls'
[   28.406843][ T4479] loop2: detected capacity change from 0 to 87
[   28.430242][ T4479] attempt to access beyond end of device
[   28.430242][ T4479] loop2: rw=2049, want=92, limit=87
[   28.441217][ T4479] Buffer I/O error on dev loop2, logical block 45, lost async page write
03:34:50 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KDGKBDIACR(r0, 0x5414, &(0x7f0000000140)=""/224)

03:34:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

03:34:50 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x4800)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

03:34:50 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
rseq(0x0, 0x0, 0x7, 0x0)

[   28.451727][ T4479] attempt to access beyond end of device
[   28.451727][ T4479] loop2: rw=2049, want=94, limit=87
[   28.462686][ T4479] Buffer I/O error on dev loop2, logical block 46, lost async page write
[   28.486458][ T4503] attempt to access beyond end of device
[   28.486458][ T4503] loop2: rw=2049, want=98, limit=87
03:34:50 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KDGKBDIACR(r0, 0x5414, &(0x7f0000000140)=""/224)

03:34:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

03:34:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000001580)=[{&(0x7f0000001600)=""/220, 0xdc}], 0x1, 0x5b, 0x0)

03:34:50 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KDGKBDIACR(r0, 0x5414, &(0x7f0000000140)=""/224)

03:34:50 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
rseq(0x0, 0x0, 0x7, 0x0)

03:34:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

[   28.598066][ T4531] loop2: detected capacity change from 0 to 87
03:34:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000001580)=[{&(0x7f0000001600)=""/220, 0xdc}], 0x1, 0x5b, 0x0)

[   28.665943][ T4531] attempt to access beyond end of device
[   28.665943][ T4531] loop2: rw=2049, want=92, limit=87
[   28.676791][ T4531] Buffer I/O error on dev loop2, logical block 45, lost async page write
03:34:50 executing program 4:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x1)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
fallocate(r2, 0x0, 0x0, 0x10000101)
syz_open_procfs(0x0, 0x0)

03:34:50 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
rseq(0x0, 0x0, 0x7, 0x0)

03:34:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

03:34:50 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x4800)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

03:34:50 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0)
preadv(r1, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0xa00}], 0x3, 0x0, 0x0)

03:34:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r1, &(0x7f0000001580)=[{&(0x7f0000001600)=""/220, 0xdc}], 0x1, 0x5b, 0x0)

03:34:50 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x12e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x0, 0x0)
exit_group(0x0)

[   28.759458][ T4531] attempt to access beyond end of device
[   28.759458][ T4531] loop2: rw=2049, want=94, limit=87
[   28.770568][ T4531] Buffer I/O error on dev loop2, logical block 46, lost async page write
[   28.779948][    C1] hrtimer: interrupt took 146420 ns
03:34:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

03:34:50 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x12e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x0, 0x0)
exit_group(0x0)

03:34:50 executing program 4:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x1)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
fallocate(r2, 0x0, 0x0, 0x10000101)
syz_open_procfs(0x0, 0x0)

03:34:50 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0)
preadv(r1, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0xa00}], 0x3, 0x0, 0x0)

03:34:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

03:34:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x14)

03:34:50 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x12e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x0, 0x0)
exit_group(0x0)

[   28.906965][ T4585] loop2: detected capacity change from 0 to 87
03:34:50 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r1, 0x6deb, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0xca9a3b, &(0x7f00000000c0)={0x77359400}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1d4b9d847c2cc87dd438128d010687f92a18a9"})

[   28.992015][ T4585] attempt to access beyond end of device
[   28.992015][ T4585] loop2: rw=2049, want=92, limit=87
[   29.002869][ T4585] Buffer I/O error on dev loop2, logical block 45, lost async page write
03:34:50 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x4800)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

03:34:50 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0)
preadv(r1, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0xa00}], 0x3, 0x0, 0x0)

03:34:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x14)

03:34:50 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x12e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x0, 0x0)
exit_group(0x0)

03:34:50 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0)

03:34:50 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0)
preadv(r1, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0xa00}], 0x3, 0x0, 0x0)

[   29.031610][ T4585] attempt to access beyond end of device
[   29.031610][ T4585] loop2: rw=2049, want=94, limit=87
[   29.031688][ T4585] Buffer I/O error on dev loop2, logical block 46, lost async page write
[   29.137164][ T4636] loop2: detected capacity change from 0 to 87
[   29.168942][ T4636] attempt to access beyond end of device
[   29.168942][ T4636] loop2: rw=2049, want=92, limit=87
[   29.179996][ T4636] Buffer I/O error on dev loop2, logical block 45, lost async page write
[   29.232466][ T4636] attempt to access beyond end of device
[   29.232466][ T4636] loop2: rw=2049, want=94, limit=87
[   29.243390][ T4636] Buffer I/O error on dev loop2, logical block 46, lost async page write
03:34:51 executing program 4:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x1)
lseek(r0, 0x1200, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
fallocate(r2, 0x0, 0x0, 0x10000101)
syz_open_procfs(0x0, 0x0)

03:34:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x14)

03:34:51 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000003500)='-', 0x1}], 0x1, 0x0, 0x0)

03:34:51 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0)

03:34:51 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0)

03:34:51 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r1, 0x6deb, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0xca9a3b, &(0x7f00000000c0)={0x77359400}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1d4b9d847c2cc87dd438128d010687f92a18a9"})

03:34:51 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0)

03:34:51 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000003500)='-', 0x1}], 0x1, 0x0, 0x0)

03:34:51 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0)

03:34:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x14)

03:34:51 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0)

03:34:51 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r1, 0x6deb, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0xca9a3b, &(0x7f00000000c0)={0x77359400}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1d4b9d847c2cc87dd438128d010687f92a18a9"})