Warning: Permanently added '10.128.1.24' (ECDSA) to the list of known hosts.
2021/05/04 13:48:43 fuzzer started
2021/05/04 13:48:43 dialing manager at 10.128.0.163:36445
2021/05/04 13:48:44 syscalls: 1982
2021/05/04 13:48:44 code coverage: enabled
2021/05/04 13:48:44 comparison tracing: enabled
2021/05/04 13:48:44 extra coverage: enabled
2021/05/04 13:48:44 setuid sandbox: enabled
2021/05/04 13:48:44 namespace sandbox: enabled
2021/05/04 13:48:44 Android sandbox: enabled
2021/05/04 13:48:44 fault injection: enabled
2021/05/04 13:48:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/05/04 13:48:44 net packet injection: /dev/net/tun does not exist
2021/05/04 13:48:44 net device setup: enabled
2021/05/04 13:48:44 concurrency sanitizer: enabled
2021/05/04 13:48:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/05/04 13:48:44 USB emulation: /dev/raw-gadget does not exist
2021/05/04 13:48:44 hci packet injection: /dev/vhci does not exist
2021/05/04 13:48:44 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2021/05/04 13:48:44 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2021/05/04 13:48:44 suppressing KCSAN reports in functions: 'blk_mq_dispatch_rq_list' 'generic_write_end' 'step_into' 'n_tty_receive_buf_common' '__ext4_new_inode' 'ext4_free_inodes_count' '__xa_clear_mark' 'do_readlinkat' 
2021/05/04 13:48:44 fetching corpus: 0, signal 0/2000 (executing program)
2021/05/04 13:48:44 fetching corpus: 50, signal 12616/16104 (executing program)
2021/05/04 13:48:44 fetching corpus: 100, signal 23018/27575 (executing program)
2021/05/04 13:48:44 fetching corpus: 150, signal 29850/35284 (executing program)
2021/05/04 13:48:44 fetching corpus: 200, signal 35802/41964 (executing program)
2021/05/04 13:48:44 fetching corpus: 250, signal 39811/46677 (executing program)
2021/05/04 13:48:45 fetching corpus: 300, signal 45772/52968 (executing program)
2021/05/04 13:48:45 fetching corpus: 350, signal 51177/58515 (executing program)
2021/05/04 13:48:45 fetching corpus: 400, signal 54027/61763 (executing program)
2021/05/04 13:48:45 fetching corpus: 450, signal 58259/65947 (executing program)
2021/05/04 13:48:45 fetching corpus: 500, signal 61971/69584 (executing program)
2021/05/04 13:48:45 fetching corpus: 550, signal 64624/72269 (executing program)
syzkaller login: [   18.449581][ T1744] ==================================================================
[   18.452973][ T1744] BUG: KCSAN: data-race in __send_signal / futex_wait_queue_me
[   18.455658][ T1744] 
[   18.456291][ T1744] write to 0xffff8881003b802c of 4 bytes by task 1748 on cpu 1:
[   18.459305][ T1744]  futex_wait_queue_me+0x198/0x260
[   18.461563][ T1744]  futex_wait+0x143/0x430
[   18.463464][ T1744]  do_futex+0x9e8/0x1ee0
[   18.465426][ T1744]  __se_sys_futex+0x2a8/0x390
[   18.467383][ T1744]  __x64_sys_futex+0x74/0x80
[   18.468706][ T1744]  do_syscall_64+0x4a/0x90
[   18.471476][ T1744]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   18.477364][ T1744] 
[   18.479663][ T1744] read to 0xffff8881003b802c of 4 bytes by task 1744 on cpu 0:
[   18.487184][ T1744]  __send_signal+0x282/0x760
[   18.491769][ T1744]  send_signal+0x281/0x390
[   18.496176][ T1744]  do_send_specific+0x13d/0x1c0
[   18.501042][ T1744]  __x64_sys_tgkill+0x108/0x140
[   18.505883][ T1744]  do_syscall_64+0x4a/0x90
[   18.510301][ T1744]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   18.516174][ T1744] 
[   18.518472][ T1744] Reported by Kernel Concurrency Sanitizer on:
[   18.524591][ T1744] CPU: 0 PID: 1744 Comm: syz-fuzzer Not tainted 5.12.0-syzkaller #0
[   18.532564][ T1744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
2021/05/04 13:48:45 fetching corpus: 600, signal 66273/74129 (executing program)
[   18.542593][ T1744] ==================================================================
2021/05/04 13:48:45 fetching corpus: 650, signal 69741/77165 (executing program)
2021/05/04 13:48:45 fetching corpus: 700, signal 72051/79260 (executing program)
2021/05/04 13:48:46 fetching corpus: 750, signal 73772/80838 (executing program)
2021/05/04 13:48:46 fetching corpus: 800, signal 76226/82860 (executing program)
2021/05/04 13:48:46 fetching corpus: 850, signal 78771/84778 (executing program)
2021/05/04 13:48:46 fetching corpus: 900, signal 80453/86076 (executing program)
2021/05/04 13:48:46 fetching corpus: 950, signal 82337/87455 (executing program)
2021/05/04 13:48:46 fetching corpus: 1000, signal 83734/88510 (executing program)
2021/05/04 13:48:46 fetching corpus: 1050, signal 85225/89540 (executing program)
2021/05/04 13:48:46 fetching corpus: 1100, signal 87176/90698 (executing program)
2021/05/04 13:48:46 fetching corpus: 1150, signal 88537/91512 (executing program)
2021/05/04 13:48:46 fetching corpus: 1200, signal 90713/92645 (executing program)
2021/05/04 13:48:47 fetching corpus: 1250, signal 92002/93295 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93733 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93767 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93791 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93834 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93861 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93896 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93922 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93948 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/93983 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94010 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94042 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94073 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94103 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94130 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94156 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94191 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94212 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94242 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94271 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94301 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94328 (executing program)
2021/05/04 13:48:47 fetching corpus: 1292, signal 92940/94328 (executing program)
2021/05/04 13:48:48 starting 6 fuzzer processes
13:48:48 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000280)='^', 0x1}], 0x2, 0x4, 0x0)

13:48:48 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

13:48:48 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e619f9", 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="040428009dfd6dc139dcff03d5cb6c182f0c53581167ba1c962c442b7918d77f272c55cc4618af1eeed80f1bf675941115922e11"], 0xfdef)

13:48:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10)
write(r0, &(0x7f0000000040)="240000001a005f2014f9f4070009040002002000000000008000000008000500000074a4", 0x24)

13:48:48 executing program 3:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:48 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[   21.510203][   T25] audit: type=1400 audit(1620136128.682:8): avc:  denied  { execmem } for  pid=1755 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   21.634823][ T1764] cgroup: Unknown subsys name 'perf_event'
[   21.660476][ T1764] cgroup: Unknown subsys name 'net_cls'
[   21.690304][ T1766] cgroup: Unknown subsys name 'perf_event'
[   21.696387][ T1766] cgroup: Unknown subsys name 'net_cls'
[   21.720231][ T1769] cgroup: Unknown subsys name 'perf_event'
[   21.726192][ T1769] cgroup: Unknown subsys name 'net_cls'
[   21.731718][ T1771] cgroup: Unknown subsys name 'perf_event'
[   21.738441][ T1771] cgroup: Unknown subsys name 'net_cls'
[   21.745222][ T1770] cgroup: Unknown subsys name 'perf_event'
[   21.755839][ T1770] cgroup: Unknown subsys name 'net_cls'
[   21.769593][ T1783] cgroup: Unknown subsys name 'perf_event'
[   21.779862][ T1783] cgroup: Unknown subsys name 'net_cls'
13:48:52 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

13:48:52 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

13:48:52 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e619f9", 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="040428009dfd6dc139dcff03d5cb6c182f0c53581167ba1c962c442b7918d77f272c55cc4618af1eeed80f1bf675941115922e11"], 0xfdef)

13:48:52 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000280)='^', 0x1}], 0x2, 0x4, 0x0)

13:48:52 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e619f9", 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="040428009dfd6dc139dcff03d5cb6c182f0c53581167ba1c962c442b7918d77f272c55cc4618af1eeed80f1bf675941115922e11"], 0xfdef)

13:48:52 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

13:48:52 executing program 3:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:52 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e619f9", 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="040428009dfd6dc139dcff03d5cb6c182f0c53581167ba1c962c442b7918d77f272c55cc4618af1eeed80f1bf675941115922e11"], 0xfdef)

13:48:53 executing program 1:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[   25.838348][ T4521] loop4: detected capacity change from 0 to 87
13:48:53 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10)
write(r0, &(0x7f0000000040)="240000001a005f2014f9f4070009040002002000000000008000000008000500000074a4", 0x24)

13:48:53 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000280)='^', 0x1}], 0x2, 0x4, 0x0)

13:48:53 executing program 1:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 5:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 3:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

13:48:53 executing program 3:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 5:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000280)='^', 0x1}], 0x2, 0x4, 0x0)

13:48:53 executing program 1:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10)
write(r0, &(0x7f0000000040)="240000001a005f2014f9f4070009040002002000000000008000000008000500000074a4", 0x24)

[   25.950054][ T4552] loop4: detected capacity change from 0 to 87
13:48:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

13:48:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b80000001300050f0000000000000000fc02000000000000000600000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0)

13:48:53 executing program 5:
pipe2$9p(&(0x7f0000000080), 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

13:48:53 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10)
write(r0, &(0x7f0000000040)="240000001a005f2014f9f4070009040002002000000000008000000008000500000074a4", 0x24)

13:48:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

13:48:53 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

13:48:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b80000001300050f0000000000000000fc02000000000000000600000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0)

[   26.066468][ T4580] loop3: detected capacity change from 0 to 87
13:48:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x127, &(0x7f0000000440)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x34)

13:48:53 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0)
timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
write$binfmt_script(r1, 0x0, 0x11e)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
timer_create(0x0, &(0x7f0000000800)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
write$char_usb(r1, &(0x7f0000000540)="e3", 0x1)

13:48:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

13:48:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

13:48:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x127, &(0x7f0000000440)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x34)

13:48:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b80000001300050f0000000000000000fc02000000000000000600000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0)

[   26.115010][ T4595] loop4: detected capacity change from 0 to 87
13:48:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x127, &(0x7f0000000440)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x34)

13:48:53 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

13:48:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x734, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

13:48:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b80000001300050f0000000000000000fc02000000000000000600000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0)

13:48:53 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

13:48:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x127, &(0x7f0000000440)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x34)

13:48:53 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

[   26.213354][ T4624] loop3: detected capacity change from 0 to 87
[   26.248215][ T4635] loop4: detected capacity change from 0 to 87
[   26.309380][ T4649] loop3: detected capacity change from 0 to 87
13:48:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0)
timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
write$binfmt_script(r1, 0x0, 0x11e)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
timer_create(0x0, &(0x7f0000000800)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
write$char_usb(r1, &(0x7f0000000540)="e3", 0x1)

13:48:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

13:48:54 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setresuid(0x0, 0xee00, 0x0)
setresuid(r1, r3, 0x0)

13:48:54 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
lseek(r0, 0x101f, 0x0)
lseek(r0, 0x2, 0x0)

13:48:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x10000, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="05", 0x1}], 0x1)
read(r3, &(0x7f0000000180)=""/185, 0xfffffdef)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0x10034)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:48:54 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

13:48:54 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setresuid(0x0, 0xee00, 0x0)
setresuid(r1, r3, 0x0)

13:48:54 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
lseek(r0, 0x101f, 0x0)
lseek(r0, 0x2, 0x0)

13:48:54 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe051810080008000f000a000000140000001a00ffffba16a0aa1c0900000a000000", 0x38}], 0x1}, 0x0)

13:48:54 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0)
timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
write$binfmt_script(r1, 0x0, 0x11e)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
timer_create(0x0, &(0x7f0000000800)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
write$char_usb(r1, &(0x7f0000000540)="e3", 0x1)

13:48:55 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
lseek(r0, 0x101f, 0x0)
lseek(r0, 0x2, 0x0)

13:48:55 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setresuid(0x0, 0xee00, 0x0)
setresuid(r1, r3, 0x0)

13:48:55 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:55 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x10000, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="05", 0x1}], 0x1)
read(r3, &(0x7f0000000180)=""/185, 0xfffffdef)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0x10034)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:48:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x10000, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="05", 0x1}], 0x1)
read(r3, &(0x7f0000000180)=""/185, 0xfffffdef)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0x10034)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:48:55 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:55 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
setresuid(0x0, 0xee00, 0x0)
setresuid(r1, r3, 0x0)

13:48:55 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
lseek(r0, 0x101f, 0x0)
lseek(r0, 0x2, 0x0)

13:48:55 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

13:48:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x10000, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="05", 0x1}], 0x1)
read(r3, &(0x7f0000000180)=""/185, 0xfffffdef)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0x10034)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)