Warning: Permanently added '10.128.1.3' (ECDSA) to the list of known hosts.
2021/06/14 10:04:08 fuzzer started
2021/06/14 10:04:08 dialing manager at 10.128.0.163:37361
2021/06/14 10:04:09 syscalls: 1998
2021/06/14 10:04:09 code coverage: enabled
2021/06/14 10:04:09 comparison tracing: enabled
2021/06/14 10:04:09 extra coverage: enabled
2021/06/14 10:04:09 setuid sandbox: enabled
2021/06/14 10:04:09 namespace sandbox: enabled
2021/06/14 10:04:09 Android sandbox: enabled
2021/06/14 10:04:09 fault injection: enabled
2021/06/14 10:04:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/06/14 10:04:09 net packet injection: /dev/net/tun does not exist
2021/06/14 10:04:09 net device setup: enabled
2021/06/14 10:04:09 concurrency sanitizer: enabled
2021/06/14 10:04:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/06/14 10:04:09 USB emulation: /dev/raw-gadget does not exist
2021/06/14 10:04:09 hci packet injection: /dev/vhci does not exist
2021/06/14 10:04:09 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2021/06/14 10:04:09 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2021/06/14 10:04:10 suppressing KCSAN reports in functions: 'ext4_mark_iloc_dirty' 'ext4_writepages' 'n_tty_receive_buf_common' '__find_get_block' 'kauditd_thread' '__ps2_command' 'do_notify_parent_cldstop' '__xa_clear_mark' 'fifo_open' 'generic_write_end' 'blk_mq_rq_ctx_init' 'blk_mq_request_bypass_insert' 'dd_has_work' 'do_sys_poll' 'ext4_file_write_iter' 'ps2_do_sendbyte' 'xas_clear_mark' 
2021/06/14 10:04:10 fetching corpus: 0, signal 0/2000 (executing program)
2021/06/14 10:04:10 fetching corpus: 49, signal 15564/19261 (executing program)
2021/06/14 10:04:10 fetching corpus: 99, signal 21950/27271 (executing program)
2021/06/14 10:04:10 fetching corpus: 149, signal 30605/37316 (executing program)
2021/06/14 10:04:10 fetching corpus: 199, signal 34764/42974 (executing program)
2021/06/14 10:04:10 fetching corpus: 249, signal 37937/47598 (executing program)
2021/06/14 10:04:10 fetching corpus: 299, signal 41807/52793 (executing program)
2021/06/14 10:04:10 fetching corpus: 349, signal 44293/56619 (executing program)
2021/06/14 10:04:10 fetching corpus: 399, signal 48675/62098 (executing program)
2021/06/14 10:04:10 fetching corpus: 449, signal 50806/65492 (executing program)
2021/06/14 10:04:10 fetching corpus: 499, signal 52433/68439 (executing program)
2021/06/14 10:04:10 fetching corpus: 549, signal 54720/71907 (executing program)
2021/06/14 10:04:10 fetching corpus: 599, signal 58031/76227 (executing program)
2021/06/14 10:04:10 fetching corpus: 649, signal 64866/83480 (executing program)
2021/06/14 10:04:10 fetching corpus: 699, signal 67828/87268 (executing program)
2021/06/14 10:04:10 fetching corpus: 749, signal 69100/89572 (executing program)
2021/06/14 10:04:10 fetching corpus: 799, signal 71138/92529 (executing program)
2021/06/14 10:04:10 fetching corpus: 849, signal 72701/95078 (executing program)
2021/06/14 10:04:10 fetching corpus: 899, signal 74733/97943 (executing program)
2021/06/14 10:04:10 fetching corpus: 949, signal 75928/100086 (executing program)
2021/06/14 10:04:10 fetching corpus: 999, signal 79478/104002 (executing program)
2021/06/14 10:04:10 fetching corpus: 1049, signal 81466/106699 (executing program)
2021/06/14 10:04:10 fetching corpus: 1099, signal 83490/109422 (executing program)
2021/06/14 10:04:10 fetching corpus: 1149, signal 84344/111197 (executing program)
2021/06/14 10:04:10 fetching corpus: 1199, signal 86085/113630 (executing program)
2021/06/14 10:04:10 fetching corpus: 1249, signal 87005/115331 (executing program)
2021/06/14 10:04:11 fetching corpus: 1298, signal 89329/118142 (executing program)
2021/06/14 10:04:11 fetching corpus: 1347, signal 91350/120665 (executing program)
2021/06/14 10:04:11 fetching corpus: 1397, signal 93400/123124 (executing program)
2021/06/14 10:04:11 fetching corpus: 1447, signal 95091/125340 (executing program)
2021/06/14 10:04:11 fetching corpus: 1496, signal 96454/127274 (executing program)
2021/06/14 10:04:11 fetching corpus: 1546, signal 97481/129017 (executing program)
2021/06/14 10:04:11 fetching corpus: 1596, signal 99395/131220 (executing program)
2021/06/14 10:04:11 fetching corpus: 1646, signal 100216/132736 (executing program)
2021/06/14 10:04:11 fetching corpus: 1696, signal 101205/134336 (executing program)
2021/06/14 10:04:11 fetching corpus: 1746, signal 103368/136615 (executing program)
2021/06/14 10:04:11 fetching corpus: 1796, signal 104367/138150 (executing program)
2021/06/14 10:04:11 fetching corpus: 1844, signal 105364/139637 (executing program)
2021/06/14 10:04:11 fetching corpus: 1894, signal 106197/141021 (executing program)
2021/06/14 10:04:11 fetching corpus: 1944, signal 106906/142287 (executing program)
2021/06/14 10:04:11 fetching corpus: 1992, signal 107851/143766 (executing program)
2021/06/14 10:04:11 fetching corpus: 2042, signal 108302/144927 (executing program)
2021/06/14 10:04:11 fetching corpus: 2092, signal 109148/146228 (executing program)
2021/06/14 10:04:11 fetching corpus: 2142, signal 110681/147949 (executing program)
2021/06/14 10:04:11 fetching corpus: 2192, signal 111763/149360 (executing program)
2021/06/14 10:04:11 fetching corpus: 2242, signal 112946/150785 (executing program)
2021/06/14 10:04:11 fetching corpus: 2291, signal 114735/152529 (executing program)
2021/06/14 10:04:11 fetching corpus: 2341, signal 115379/153627 (executing program)
2021/06/14 10:04:11 fetching corpus: 2391, signal 116617/155007 (executing program)
2021/06/14 10:04:11 fetching corpus: 2441, signal 117653/156250 (executing program)
2021/06/14 10:04:11 fetching corpus: 2491, signal 118378/157344 (executing program)
2021/06/14 10:04:11 fetching corpus: 2541, signal 119104/158438 (executing program)
2021/06/14 10:04:11 fetching corpus: 2591, signal 119781/159499 (executing program)
2021/06/14 10:04:12 fetching corpus: 2641, signal 121130/160809 (executing program)
2021/06/14 10:04:12 fetching corpus: 2691, signal 122218/162045 (executing program)
2021/06/14 10:04:12 fetching corpus: 2741, signal 123469/163279 (executing program)
2021/06/14 10:04:12 fetching corpus: 2791, signal 124280/164298 (executing program)
2021/06/14 10:04:12 fetching corpus: 2841, signal 125322/165456 (executing program)
2021/06/14 10:04:12 fetching corpus: 2890, signal 128557/167334 (executing program)
2021/06/14 10:04:12 fetching corpus: 2940, signal 129321/168247 (executing program)
2021/06/14 10:04:12 fetching corpus: 2990, signal 129869/169111 (executing program)
2021/06/14 10:04:12 fetching corpus: 3040, signal 130389/169935 (executing program)
2021/06/14 10:04:12 fetching corpus: 3090, signal 130971/170744 (executing program)
2021/06/14 10:04:12 fetching corpus: 3140, signal 131389/171531 (executing program)
2021/06/14 10:04:12 fetching corpus: 3190, signal 132574/172559 (executing program)
2021/06/14 10:04:12 fetching corpus: 3239, signal 133643/173484 (executing program)
2021/06/14 10:04:12 fetching corpus: 3289, signal 134340/174289 (executing program)
2021/06/14 10:04:12 fetching corpus: 3339, signal 135055/175064 (executing program)
2021/06/14 10:04:12 fetching corpus: 3389, signal 136367/176031 (executing program)
2021/06/14 10:04:12 fetching corpus: 3439, signal 136951/176804 (executing program)
2021/06/14 10:04:12 fetching corpus: 3489, signal 137729/177586 (executing program)
2021/06/14 10:04:12 fetching corpus: 3539, signal 138456/178369 (executing program)
2021/06/14 10:04:12 fetching corpus: 3589, signal 138963/179027 (executing program)
2021/06/14 10:04:12 fetching corpus: 3639, signal 139704/179741 (executing program)
2021/06/14 10:04:12 fetching corpus: 3689, signal 140306/180422 (executing program)
2021/06/14 10:04:12 fetching corpus: 3739, signal 140695/181043 (executing program)
2021/06/14 10:04:12 fetching corpus: 3789, signal 141186/181639 (executing program)
2021/06/14 10:04:12 fetching corpus: 3839, signal 142068/182318 (executing program)
2021/06/14 10:04:12 fetching corpus: 3889, signal 142668/182935 (executing program)
2021/06/14 10:04:12 fetching corpus: 3939, signal 143101/183508 (executing program)
2021/06/14 10:04:12 fetching corpus: 3989, signal 143723/184129 (executing program)
2021/06/14 10:04:12 fetching corpus: 4039, signal 144244/184704 (executing program)
2021/06/14 10:04:13 fetching corpus: 4088, signal 144816/185268 (executing program)
2021/06/14 10:04:13 fetching corpus: 4138, signal 145571/185876 (executing program)
2021/06/14 10:04:13 fetching corpus: 4188, signal 146147/186391 (executing program)
2021/06/14 10:04:13 fetching corpus: 4238, signal 146495/186928 (executing program)
2021/06/14 10:04:13 fetching corpus: 4288, signal 147043/187424 (executing program)
2021/06/14 10:04:13 fetching corpus: 4338, signal 147550/187940 (executing program)
2021/06/14 10:04:13 fetching corpus: 4388, signal 148549/188485 (executing program)
2021/06/14 10:04:13 fetching corpus: 4438, signal 149032/188961 (executing program)
2021/06/14 10:04:13 fetching corpus: 4488, signal 149575/189416 (executing program)
2021/06/14 10:04:13 fetching corpus: 4538, signal 150260/189863 (executing program)
2021/06/14 10:04:13 fetching corpus: 4588, signal 150793/190341 (executing program)
2021/06/14 10:04:13 fetching corpus: 4638, signal 151483/190768 (executing program)
2021/06/14 10:04:13 fetching corpus: 4688, signal 151928/191206 (executing program)
2021/06/14 10:04:13 fetching corpus: 4738, signal 152645/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 4788, signal 153010/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 4838, signal 153552/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 4888, signal 154173/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 4938, signal 154876/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 4988, signal 155385/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5038, signal 155825/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5088, signal 156385/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5138, signal 156839/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5188, signal 157705/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5238, signal 158267/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5287, signal 158633/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5337, signal 158971/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5387, signal 159515/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5437, signal 159802/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5486, signal 160438/191497 (executing program)
2021/06/14 10:04:13 fetching corpus: 5536, signal 161567/191497 (executing program)
2021/06/14 10:04:14 fetching corpus: 5586, signal 163548/191497 (executing program)
2021/06/14 10:04:14 fetching corpus: 5636, signal 164443/191499 (executing program)
2021/06/14 10:04:14 fetching corpus: 5686, signal 164919/191499 (executing program)
2021/06/14 10:04:14 fetching corpus: 5736, signal 165191/191499 (executing program)
2021/06/14 10:04:14 fetching corpus: 5786, signal 165903/191499 (executing program)
2021/06/14 10:04:14 fetching corpus: 5836, signal 166259/191545 (executing program)
2021/06/14 10:04:14 fetching corpus: 5886, signal 166579/191545 (executing program)
2021/06/14 10:04:14 fetching corpus: 5936, signal 167171/191545 (executing program)
2021/06/14 10:04:14 fetching corpus: 5986, signal 167765/191545 (executing program)
2021/06/14 10:04:14 fetching corpus: 6035, signal 168248/191546 (executing program)
2021/06/14 10:04:14 fetching corpus: 6085, signal 168654/191546 (executing program)
2021/06/14 10:04:14 fetching corpus: 6135, signal 169156/191546 (executing program)
2021/06/14 10:04:14 fetching corpus: 6185, signal 169537/191546 (executing program)
2021/06/14 10:04:14 fetching corpus: 6235, signal 169860/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6285, signal 170255/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6335, signal 170872/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6385, signal 171420/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6435, signal 171777/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6485, signal 172086/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6535, signal 172527/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6585, signal 173001/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6635, signal 173288/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6685, signal 173885/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6735, signal 174181/191548 (executing program)
2021/06/14 10:04:14 fetching corpus: 6785, signal 174588/191549 (executing program)
2021/06/14 10:04:14 fetching corpus: 6835, signal 175042/191549 (executing program)
2021/06/14 10:04:14 fetching corpus: 6885, signal 175463/191549 (executing program)
2021/06/14 10:04:14 fetching corpus: 6935, signal 175970/191553 (executing program)
2021/06/14 10:04:14 fetching corpus: 6985, signal 176357/191554 (executing program)
2021/06/14 10:04:14 fetching corpus: 7035, signal 176654/191554 (executing program)
2021/06/14 10:04:14 fetching corpus: 7085, signal 177115/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7135, signal 177621/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7185, signal 177937/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7235, signal 178453/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7285, signal 178805/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7335, signal 179074/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7385, signal 179524/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7435, signal 179798/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7485, signal 180074/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7535, signal 180834/191558 (executing program)
2021/06/14 10:04:15 fetching corpus: 7585, signal 181221/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7635, signal 181508/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7685, signal 182443/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7735, signal 182833/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7785, signal 183271/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7835, signal 183589/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7885, signal 183976/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7935, signal 184229/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 7985, signal 184562/191602 (executing program)
2021/06/14 10:04:15 fetching corpus: 8035, signal 184812/191604 (executing program)
2021/06/14 10:04:15 fetching corpus: 8085, signal 185336/191604 (executing program)
2021/06/14 10:04:15 fetching corpus: 8135, signal 185664/191604 (executing program)
2021/06/14 10:04:15 fetching corpus: 8185, signal 186096/191604 (executing program)
2021/06/14 10:04:15 fetching corpus: 8235, signal 186368/191604 (executing program)
2021/06/14 10:04:15 fetching corpus: 8285, signal 186847/191604 (executing program)
2021/06/14 10:04:15 fetching corpus: 8335, signal 187337/191608 (executing program)
2021/06/14 10:04:15 fetching corpus: 8385, signal 187747/191608 (executing program)
2021/06/14 10:04:15 fetching corpus: 8435, signal 188131/191608 (executing program)
2021/06/14 10:04:15 fetching corpus: 8485, signal 188462/191608 (executing program)
2021/06/14 10:04:15 fetching corpus: 8535, signal 188754/191608 (executing program)
2021/06/14 10:04:16 fetching corpus: 8585, signal 189063/191608 (executing program)
2021/06/14 10:04:16 fetching corpus: 8635, signal 189646/191608 (executing program)
2021/06/14 10:04:16 fetching corpus: 8680, signal 189977/191608 (executing program)
2021/06/14 10:04:16 fetching corpus: 8680, signal 189977/191608 (executing program)
2021/06/14 10:04:17 starting 6 fuzzer processes
10:04:17 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
read(r2, &(0x7f0000000900)=""/193, 0xc1)

10:04:17 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents64(r0, &(0x7f0000000200)=""/41, 0x29)
r1 = openat(0xffffffffffffffff, &(0x7f00000007c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
pipe(&(0x7f00000001c0))
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getdents64(r0, &(0x7f0000000c40)=""/81, 0x51)

10:04:17 executing program 5:
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0)

10:04:17 executing program 2:
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getpgid(r0)

10:04:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=@newpolicy={0xc4, 0x13, 0x757a68bfabe074eb, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2}}, [@sec_ctx={0x4, 0x8, {0x8}}]}, 0xc4}}, 0x0)

10:04:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca8430291000000390009", 0x1f}], 0x1}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)

[   26.262880][   T25] audit: type=1400 audit(1623665057.590:8): avc:  denied  { execmem } for  pid=1745 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   26.356951][ T1751] cgroup: Unknown subsys name 'perf_event'
[   26.375152][ T1751] cgroup: Unknown subsys name 'net_cls'
[   26.392265][ T1752] cgroup: Unknown subsys name 'perf_event'
[   26.412938][ T1752] cgroup: Unknown subsys name 'net_cls'
[   26.415214][ T1754] cgroup: Unknown subsys name 'perf_event'
[   26.420793][ T1755] cgroup: Unknown subsys name 'perf_event'
[   26.427109][ T1756] cgroup: Unknown subsys name 'perf_event'
[   26.437157][ T1754] cgroup: Unknown subsys name 'net_cls'
[   26.442153][ T1755] cgroup: Unknown subsys name 'net_cls'
[   26.444813][ T1756] cgroup: Unknown subsys name 'net_cls'
[   26.462206][ T1763] cgroup: Unknown subsys name 'perf_event'
[   26.471348][ T1763] cgroup: Unknown subsys name 'net_cls'
10:04:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=@newpolicy={0xc4, 0x13, 0x757a68bfabe074eb, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2}}, [@sec_ctx={0x4, 0x8, {0x8}}]}, 0xc4}}, 0x0)

10:04:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=@newpolicy={0xc4, 0x13, 0x757a68bfabe074eb, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2}}, [@sec_ctx={0x4, 0x8, {0x8}}]}, 0xc4}}, 0x0)

10:04:22 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=@newpolicy={0xc4, 0x13, 0x757a68bfabe074eb, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2}}, [@sec_ctx={0x4, 0x8, {0x8}}]}, 0xc4}}, 0x0)

10:04:22 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

10:04:22 executing program 5:
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0)

10:04:22 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

10:04:22 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
read(r2, &(0x7f0000000900)=""/193, 0xc1)

10:04:22 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents64(r0, &(0x7f0000000200)=""/41, 0x29)
r1 = openat(0xffffffffffffffff, &(0x7f00000007c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
pipe(&(0x7f00000001c0))
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getdents64(r0, &(0x7f0000000c40)=""/81, 0x51)

10:04:22 executing program 5:
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0)

10:04:22 executing program 2:
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getpgid(r0)

10:04:22 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

10:04:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca8430291000000390009", 0x1f}], 0x1}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:04:23 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents64(r0, &(0x7f0000000200)=""/41, 0x29)
r1 = openat(0xffffffffffffffff, &(0x7f00000007c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
pipe(&(0x7f00000001c0))
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getdents64(r0, &(0x7f0000000c40)=""/81, 0x51)

10:04:23 executing program 5:
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0)

10:04:23 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
read(r2, &(0x7f0000000900)=""/193, 0xc1)

10:04:23 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

10:04:23 executing program 2:
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getpgid(r0)

10:04:23 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r1, 0x0)
connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
read(r2, &(0x7f0000000900)=""/193, 0xc1)

10:04:23 executing program 2:
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getpgid(r0)

10:04:23 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

[   32.117207][ T1761] ==================================================================
[   32.125724][ T1761] BUG: KCSAN: data-race in n_tty_receive_char_special / n_tty_receive_char_special
[   32.135023][ T1761] 
[   32.137360][ T1761] write to 0xffffc90000bd5000 of 8 bytes by task 4548 on cpu 1:
[   32.145274][ T1761]  n_tty_receive_char_special+0xd91/0x3ac0
[   32.151344][ T1761]  n_tty_receive_buf_common+0x191c/0x1e20
[   32.157160][ T1761]  n_tty_receive_buf+0x2b/0x40
[   32.161947][ T1761]  tty_ioctl+0x968/0x1120
10:04:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x2, {@private2}}}], 0x28}}], 0x2, 0x0)

[   32.166855][ T1761]  __se_sys_ioctl+0xcb/0x140
[   32.171757][ T1761]  __x64_sys_ioctl+0x3f/0x50
[   32.176359][ T1761]  do_syscall_64+0x4a/0x90
[   32.180871][ T1761]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   32.187086][ T1761] 
[   32.189409][ T1761] read to 0xffffc90000bd5000 of 8 bytes by task 1761 on cpu 0:
[   32.197082][ T1761]  n_tty_receive_char_special+0x398d/0x3ac0
[   32.202981][ T1761]  n_tty_receive_buf_common+0x191c/0x1e20
[   32.209011][ T1761]  n_tty_receive_buf2+0x2e/0x40
[   32.213879][ T1761]  tty_ldisc_receive_buf+0x5b/0xf0
[   32.219092][ T1761]  tty_port_default_receive_buf+0x54/0x80
[   32.225021][ T1761]  flush_to_ldisc+0x1c5/0x2c0
[   32.229715][ T1761]  process_one_work+0x3e9/0x8f0
[   32.234774][ T1761]  worker_thread+0x636/0xae0
[   32.239378][ T1761]  kthread+0x1d0/0x1f0
[   32.243632][ T1761]  ret_from_fork+0x1f/0x30
[   32.248049][ T1761] 
[   32.250368][ T1761] value changed: 0x0000000000000011 -> 0x0000000000000009
[   32.257559][ T1761] 
[   32.259894][ T1761] Reported by Kernel Concurrency Sanitizer on:
10:04:23 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents64(r0, &(0x7f0000000200)=""/41, 0x29)
r1 = openat(0xffffffffffffffff, &(0x7f00000007c0)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
pipe(&(0x7f00000001c0))
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getdents64(r0, &(0x7f0000000c40)=""/81, 0x51)

10:04:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x2, {@private2}}}], 0x28}}], 0x2, 0x0)

[   32.266142][ T1761] CPU: 0 PID: 1761 Comm: kworker/u4:5 Not tainted 5.13.0-rc6-syzkaller #0
[   32.274744][ T1761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   32.285108][ T1761] Workqueue: events_unbound flush_to_ldisc
[   32.290935][ T1761] ==================================================================
10:04:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca8430291000000390009", 0x1f}], 0x1}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:04:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

10:04:24 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000018c0), 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

10:04:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
pwritev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)="b9", 0x1}], 0x2, 0x0, 0x0)

10:04:24 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x2, {@private2}}}], 0x28}}], 0x2, 0x0)

10:04:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x35}, {0x24}, {0x6, 0x0, 0x0, 0x7fff7ffe}]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bcbb6db8f92a8f00c0387"], 0x8d)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2959f5f20fb8000000000f10e7ffffe10300"})

10:04:24 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x2, {@private2}}}], 0x28}}], 0x2, 0x0)

10:04:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x35}, {0x24}, {0x6, 0x0, 0x0, 0x7fff7ffe}]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:24 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
pwritev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)="b9", 0x1}], 0x2, 0x0, 0x0)

10:04:24 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000018c0), 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

10:04:24 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000380)={[{@utf8}]})
mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000180)=""/235, 0xeb)

[   33.155204][ T4621] loop0: detected capacity change from 0 to 270
10:04:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca8430291000000390009", 0x1f}], 0x1}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)

10:04:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x35}, {0x24}, {0x6, 0x0, 0x0, 0x7fff7ffe}]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:25 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0))
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2080420, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x38, 0x0]}}]})

10:04:25 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000018c0), 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

10:04:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
pwritev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)="b9", 0x1}], 0x2, 0x0, 0x0)

10:04:25 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="665307007a47e3697d97af12081db251116437551e4883313e207dbc", 0x1c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

10:04:25 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0))
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2080420, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x38, 0x0]}}]})

10:04:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x35}, {0x24}, {0x6, 0x0, 0x0, 0x7fff7ffe}]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)

10:04:25 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
lseek(r0, 0x0, 0x7)

10:04:25 executing program 1:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
pwritev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)="b9", 0x1}], 0x2, 0x0, 0x0)

10:04:25 executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000018c0), 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

10:04:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14}, {0x15, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbf}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:26 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
lseek(r0, 0x0, 0x7)

10:04:26 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0))
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2080420, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x38, 0x0]}}]})

10:04:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040))
lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)

10:04:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = fcntl$dupfd(r0, 0x0, r0)
openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0)

10:04:26 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14}, {0x15, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbf}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0)

10:04:26 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14}, {0x15, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbf}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:26 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0))
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2080420, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x38, 0x0]}}]})

10:04:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = fcntl$dupfd(r0, 0x0, r0)
openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0)

[   34.806378][ T4687] loop2: detected capacity change from 0 to 512
10:04:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0)

10:04:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040))
lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)

10:04:26 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mlockall(0x7)

[   34.871047][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   34.961386][ T4720] loop2: detected capacity change from 0 to 512
[   34.982606][ T4720] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
10:04:26 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
lseek(r0, 0x0, 0x7)

10:04:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = fcntl$dupfd(r0, 0x0, r0)
openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0)

10:04:26 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14}, {0x15, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbf}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0)

10:04:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040))
lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)

10:04:26 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mlockall(0x7)

10:04:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = fcntl$dupfd(r0, 0x0, r0)
openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0)

10:04:26 executing program 4:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0)

[   35.158092][ T4741] loop2: detected capacity change from 0 to 512
[   35.180073][ T4741] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
10:04:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040))
lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)

10:04:26 executing program 1:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77)

10:04:26 executing program 3:
r0 = syz_io_uring_setup(0x76fb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = io_uring_setup(0x559e, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

[   35.356962][ T4780] loop2: detected capacity change from 0 to 512
[   35.397086][ T4780] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
10:04:26 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
lseek(r0, 0x0, 0x7)

10:04:26 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mlockall(0x7)

10:04:26 executing program 3:
r0 = syz_io_uring_setup(0x76fb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = io_uring_setup(0x559e, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

10:04:26 executing program 2:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000760007041dfffd946f610500020000e8fe02080104000d00080010000400ff7e", 0x24}], 0x1}, 0x0)

10:04:26 executing program 1:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77)

10:04:26 executing program 4:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:26 executing program 2:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000760007041dfffd946f610500020000e8fe02080104000d00080010000400ff7e", 0x24}], 0x1}, 0x0)

10:04:27 executing program 3:
r0 = syz_io_uring_setup(0x76fb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = io_uring_setup(0x559e, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

10:04:27 executing program 1:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77)

10:04:27 executing program 3:
r0 = syz_io_uring_setup(0x76fb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = io_uring_setup(0x559e, &(0x7f0000000240))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)

10:04:27 executing program 4:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:27 executing program 1:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77)

10:04:27 executing program 4:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:27 executing program 2:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000760007041dfffd946f610500020000e8fe02080104000d00080010000400ff7e", 0x24}], 0x1}, 0x0)

10:04:27 executing program 3:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:27 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mlockall(0x7)

10:04:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000080))

10:04:27 executing program 0:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:27 executing program 2:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000760007041dfffd946f610500020000e8fe02080104000d00080010000400ff7e", 0x24}], 0x1}, 0x0)

10:04:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000080))

10:04:27 executing program 2:
r0 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0)
io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r5+60000000}, 0x0)
shutdown(r4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:04:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000080))

10:04:27 executing program 3:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000080))

10:04:27 executing program 0:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:27 executing program 4:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f00000000c0)=""/4096)

10:04:27 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
r2 = io_uring_setup(0x5152, &(0x7f0000000340))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

10:04:27 executing program 3:
creat(&(0x7f0000000280)='./file0\x00', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141641, 0x0)
write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[], 0xfffffea9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unshare(0x4a060480)

10:04:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f00000000c0)=""/4096)

10:04:27 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
r2 = io_uring_setup(0x5152, &(0x7f0000000340))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

10:04:27 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f00000000c0)=""/4096)

10:04:28 executing program 2:
r0 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0)
io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r5+60000000}, 0x0)
shutdown(r4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:04:28 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
r2 = io_uring_setup(0x5152, &(0x7f0000000340))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

10:04:28 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f00000000c0)=""/4096)

10:04:28 executing program 0:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:28 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644", 0x54}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

10:04:28 executing program 4:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:28 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
r2 = io_uring_setup(0x5152, &(0x7f0000000340))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

10:04:28 executing program 5:
setrlimit(0x7, &(0x7f0000000000))
syz_open_procfs$namespace(0x0, 0x0)

10:04:28 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x82800, 0x0)
dup3(r0, r1, 0x0)

10:04:28 executing program 5:
setrlimit(0x7, &(0x7f0000000000))
syz_open_procfs$namespace(0x0, 0x0)

10:04:28 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644", 0x54}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

10:04:28 executing program 4:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:28 executing program 5:
setrlimit(0x7, &(0x7f0000000000))
syz_open_procfs$namespace(0x0, 0x0)

10:04:28 executing program 2:
r0 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0)
io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r5+60000000}, 0x0)
shutdown(r4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:04:28 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x82800, 0x0)
dup3(r0, r1, 0x0)

10:04:28 executing program 0:
syz_btf_id_by_name$bpf_lsm(0x0)
clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58)

10:04:28 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0xfe8)

10:04:28 executing program 5:
setrlimit(0x7, &(0x7f0000000000))
syz_open_procfs$namespace(0x0, 0x0)

10:04:28 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0xfe8)

10:04:28 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x82800, 0x0)
dup3(r0, r1, 0x0)

10:04:28 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000400)='[', 0x1}], 0x1)
ftruncate(r2, 0x10099b8)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

10:04:28 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x82800, 0x0)
dup3(r0, r1, 0x0)

10:04:31 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644", 0x54}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

10:04:31 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0xfe8)

10:04:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000001700)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstopts={{0x18}}], 0x18}, 0x0)

10:04:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0xc}, {0x6, 0x0, 0x0, 0x7ffffdc1}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:31 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000400)='[', 0x1}], 0x1)
ftruncate(r2, 0x10099b8)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

10:04:31 executing program 2:
r0 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0)
io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r5=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r5+60000000}, 0x0)
shutdown(r4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10:04:31 executing program 4:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0xfe8)

10:04:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000001700)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstopts={{0x18}}], 0x18}, 0x0)

10:04:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0xc}, {0x6, 0x0, 0x0, 0x7ffffdc1}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0xc}, {0x6, 0x0, 0x0, 0x7ffffdc1}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:31 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0xc}, {0x6, 0x0, 0x0, 0x7ffffdc1}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

10:04:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000001700)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstopts={{0x18}}], 0x18}, 0x0)