# https://syzkaller.appspot.com/bug?id=f203c92589084fa08fd0dd1c6c6c041087562588
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":6,"slowdown":1,"sandbox":"none","tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"vhci":true,"wifi":true,"ieee802154":true,"sysctl":true,"tmpdir":true,"segv":true}
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000)
ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000040)=0x7c0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000000c0)=""/26, 0xfffffffffffffded}, 0x0) (async)
io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0x0)