x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x80000000, 0x3, 0x44, 0x8}})
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0)
pread64(r9, 0x0, 0x0, 0x4003f)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:57 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl(r0, 0x0, &(0x7f00000001c0)="080db5052f5fa0db91332b")
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2241, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0))
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x789, &(0x7f0000000200))

04:15:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b33, &(0x7f0000000200))

[  882.219724][T21590] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
04:15:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b34, &(0x7f0000000200))

04:15:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @default, @rose, @default, @remote, @null, @remote, @rose]}, &(0x7f00000000c0)=0x48)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x40, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x856, &(0x7f0000000200))

04:15:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b35, &(0x7f0000000200))

04:15:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x954, &(0x7f0000000200))

04:15:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x12)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000280)=0x6)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000380)={0x980000, 0x1, 0x80000001, <r3=>r2, 0x0, &(0x7f0000000340)={0x9909d0, 0xffffffe0, [], @p_u16=&(0x7f0000000300)=0x2}})
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000400)='SMC_PNETID\x00')
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x200, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000800)={0x50, 0x0, 0x7, {0x7, 0x1f, 0x10001, 0x0, 0xf86, 0x6, 0x345, 0xb41e}}, 0x50)
sendmsg$SMC_PNETID_GET(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000884}, 0x4080)
r7 = socket$netlink(0x10, 0x3, 0xa)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r8, 0x4010ae94, &(0x7f00000002c0)={0x5, 0x80000001, 0x39})
quotactl(0x6, &(0x7f0000000500)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000740)="e16b6e19f3c6bc51ff07779550bb83508d12e3ccce4e4d804579e11e7e2e5aa40bd285f830536bbc155d05b7b65dab583b7044aa22f2646a47e5e018e93cf8e92f8e0549a06dad89c540545b938bbc575b99dce150350ca1b4b65572bbaec3a1c45b1e54bc9bae0fc6e0048b435896c732f6183e7b731fcb42c93fc7f0edd584e305dbd9bd5f79e09bb948522a63aa40bca1e810a40bca6d5336c5ea32f07aa7769cb9e2857d")
sendmsg$nl_generic(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r9 = dup3(0xffffffffffffffff, r7, 0x0)
r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r10, 0xc0305615, &(0x7f0000000880)={0x0, {0x334d8b61, 0x5}})
ioctl$FBIOPAN_DISPLAY(r9, 0x4606, &(0x7f00000000c0)={0x280, 0x20, 0x356, 0x480, 0x5, 0x8, 0x18, 0x0, {0xe6, 0x9, 0x1}, {0x8, 0x6}, {0x8, 0x80000000, 0x1}, {0xb2, 0x298, 0x1}, 0x2, 0x80, 0x1ff, 0x8, 0x0, 0x8, 0x7fffffff, 0x3, 0x152182a7, 0x7, 0x8, 0xfffffffe, 0xd, 0x2, 0x3, 0x6})

04:15:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b36, &(0x7f0000000200))

04:15:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x8, 0xc, 0x4, 0x40000000, 0x1, {0x77359400}, {0x3, 0x2, 0x1f, 0x8, 0x8, 0x7, ']I/_'}, 0x9, 0x1, @userptr=0xd86, 0x200, 0x0, <r2=>r1})
write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r4 = socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000140)='bpf\x00', 0x7)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x801, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000e00030a00000000000000001d0100ffef000a00", @ANYRES32=r9, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0)
r10 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r10, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
setsockopt$netrom_NETROM_T4(r10, 0x103, 0x6, &(0x7f0000000300)=0x9, 0x4)
sendto$packet(r5, &(0x7f0000000200)="bbe52195f8762b1a40960f6f4a67ccec0c2e197c0cd70d0b84271ed2b14edbbbe7060cfa2df02fa2db63992d87dbc5e1972a9259316af75752d0b5f25f9212a680075fc6dafd572fb595f652f8c8c4fe5a09feed299f1f77e0fd837bd6a040983b5cf36669a7233cbaa1f12ba74add12ae0daace08881e648f892cb76084582e5c5ab5b3f7fd69a97a10a0902987ca5bb3fe638ad452b9dd6d0d993c825c46760546989809c88c0915633ce30cf45213dfd5c5a281", 0xb5, 0xc1, &(0x7f0000000340)={0x11, 0x7, r8, 0x1, 0x20}, 0x14)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x8000, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x138, 0x30, 0x17b, 0x0, 0x0, {}, [{0x124, 0x1, [@m_sample={0x120, 0x3, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffff7d}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x7, 0x1}}]}, {0xd2, 0x6, "442b68c5fd7bc9bf8d3137350384ab3a3cabc1ed16533795ef18df93316fca2aa97d30fdfd3edd7ca357a86bb45f145e08f3b50e517a0085cfdb1d90f2f68f860c4782c49840c0e5bc5ea9fb4a7418e483776ef9a6360e9e1447b7783426551e33ac1a7012d4a0675e5e462a8306ece1be536353f493bbb2330a0bf33efa89f0690de74888cf4b7d1e88fed50f4645dbe8bd31880bbe6f792db9abad3283488f1f94abfe326c7f20765529f8e1525a9d9c9fa9e6a3f2cfdf6ff07d2672781589c43373340561ab9122c5f2ccf5bb"}}}]}]}, 0x138}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req={0x5faa, 0x5, 0x4, 0x6}, 0x10)

04:15:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x956, &(0x7f0000000200))

04:15:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "537c1192fa3df938", "68646fbddb97dae857669d0b1a0c810d", "6c94c142", "da16ff91e46a880a"}, 0x28)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES16=r3], 0x5}}, 0x80)

04:15:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b37, &(0x7f0000000200))

04:15:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xa56, &(0x7f0000000200))

04:15:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
setgid(0xee00)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3a, &(0x7f0000000200))

04:15:58 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000940)={<r2=>0x0, 0x6, 0x1, [0xf60f]}, &(0x7f0000000980)=0xa)
sendmsg$inet_sctp(r1, &(0x7f0000000a40)={&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x2, @mcast2, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000440)="d6b7193b5ac3080d3fe6fe246e12992edbcb1c53a3403b612d9dd049ba41e42a2a828c1a0630df3ce375476dc56e3f747ef9dfd5f0e72b0f0ee3d3777af85c52d3d8430fc9a66c9e7737c233c92e8df48db4c0f07c50f58505517dbdbf1c73007ff3cd91836c66954e55da4fabbb6d3a654ce4501a4b7cce3e08c3388aa054fa2eb0270f411c9960067c19b5639a53b1bea77ba9b7a4c8d6dc58dcc811db5f090fb82e42c7e331aa5b7bdea0d6ea0d772abc2ae3ac6500cf50a32976ab14dada8c7a58c9fa8b9a265fd341dda515b090821be9043c0babb2", 0xd8}, {&(0x7f0000000540)="a6293239acd74471615b27f8320b5538e6f65cd9940a3643366ac902b5240196c0a9fb42197015d83ef3671d368cbd80350e5d4254d8e36b68a897c181a29ea1e8c898594c57ee02aadcca3ee188e478ee1f4072724dc6e29b490c364af9e2b40855b2b5", 0x64}, {&(0x7f00000005c0)="111d55516d0f3d482965b9deaa8cc0752bf3e1462762d302b7074494db9a0d40d84850f9e8d98c9e09aa103bc02ac87049c2b77ac6d231cc6bbbcf3c02daae27de1845068b5de3d1826f8bd250c95773df16fcc188621e06775a90d69fb1c7ae45633579e8c16d47100b0aec4ac8be1b5e87b80422aee7521acd59de804d6f5c56102e9e5b3e5d96b10abeb2d169bd8358464fe4dfca3bba9a43509215c678950f", 0xa1}, {&(0x7f0000000680)="f3725878ff2671082159d7819e805039ece71a6b18f93bbf456bbdb010b5c44d3f17f2b33afa11840df7c9eb16aeabaa661f2062f4a8013d0fbbc1f4cd5c710d89a6bdef06f6c39a49c39f119321909e1e0d3994a587760fe2c09487752f8ebd6ff4838a55b0b6014df7e97602fd5f0ecab25dd82557253db68043dab085b7e9546648d127261addc2b6652a937c898c5a15775de8c3ebf565eaad558a4ff397b7a9477939302a0fb180d38efccfff71169a41b649fc68e82523a19b83a8bd6960ff", 0xc2}, {&(0x7f0000000780)="41881dcb2c65879ec1b42afeed12ea05cf277eedc9bb8bace1f41e997104c2a2c589c718e59954ac705cab6d994720ce3baa12acff1ae5939a63", 0x3a}, {&(0x7f00000007c0)="465470fedea343d36ef33ec6453599cfcb34401101d012301105c4656481e44762f90ceee448376f28e793bd1ac51d8fbb1c2ae50fec5f9a7221b4113a45d0c5f3624099beb1ce92d7aaf809671dbf9cf121953029fc4620081072ee4988d02a63717b9be44fa4ecf6d7bde0f8907393f6194affacf91bbe0cc2b4f6657d45566fdd0d33b567918e63ae42591c796bf605e9baf0be732a19a567d47047c76de2f9ef4b08035d68b2b090f0d45b29e1b08cfc818ee2dff04522e5ac51206d8153e26b1c03db1274e698cd8e65efe4cb340251e87ed563b8d96d3ed0efba9c048a8b1b95150a", 0xe5}], 0x6, &(0x7f00000009c0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x200, 0x8001, 0x1, 0x8, 0xfff, 0x4, 0x6, r2}}], 0x50, 0x4000000}, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/adsp1\x00', 0x20080, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r5, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000140007000000b48b5f7b283231450006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315ef18fb2cea308b13e213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cf006207b134019fe4ec7ce234000000000000005f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00050000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:15:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xb54, &(0x7f0000000200))

04:15:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = signalfd(r1, &(0x7f00000000c0)={[0x5]}, 0x8)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000100)={{}, 0x4, 0x3, 0x3})
connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040))
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1}}, 0x80)

04:15:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3b, &(0x7f0000000200))

04:15:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xb56, &(0x7f0000000200))

04:15:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:15:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3c, &(0x7f0000000200))

04:15:59 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x100, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x14, &(0x7f00000000c0)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x800d, 0xa80, 0x8, r4}, &(0x7f0000000100)=0x10)
socket$inet_tcp(0x2, 0x3, 0x6)
r5 = socket$netlink(0x10, 0x3, 0x4)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x80)
sendmsg$nl_generic(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3d, &(0x7f0000000200))

04:15:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc54, &(0x7f0000000200))

04:15:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040))
dup3(r2, r3, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:15:59 executing program 2:
r0 = open(&(0x7f0000000300)='./file0\x00', 0x18880, 0x80)
fchdir(r0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={<r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={r2, 0x0, r3})
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x20000000000000, 0x1a1c02)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
dup2(r7, r8)
r9 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
ioctl$KVM_PPC_GET_SMMU_INFO(r9, 0x8250aea6, &(0x7f00000001c0)=""/246)

04:15:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000200))

04:15:59 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80200, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x14, &(0x7f00000000c0)={r5}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8)

04:15:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc56, &(0x7f0000000200))

04:15:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0xc0)

04:15:59 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x184800)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x14, &(0x7f00000000c0)={r4}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x4, 0x0}}}, 0x5, 0x40}, &(0x7f0000000100)=0x90)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200)="9b")

04:15:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xd54, &(0x7f0000000200))

04:15:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b41, &(0x7f0000000200))

04:15:59 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl(r3, 0x9, &(0x7f0000000200)="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")
socket$inet_tcp(0x2, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000040)=0x5)

04:15:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
io_setup(0x4, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x200c0, 0x0)
io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd, 0x3, r3, &(0x7f0000000040)="41761dc167707f3623", 0x9, 0x3, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xffff, r4, &(0x7f0000000140)="a4d7", 0x2, 0x9, 0x0, 0x1}])

04:15:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xd56, &(0x7f0000000200))

04:15:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b44, &(0x7f0000000200))

04:16:00 executing program 2:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000200)="9b")

04:16:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xe54, &(0x7f0000000200))

04:16:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b45, &(0x7f0000000200))

04:16:00 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
recvfrom$rxrpc(r1, &(0x7f0000002cc0)=""/97, 0x61, 0x10020, &(0x7f0000003000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @loopback, 0xffff}}, 0x24)
r2 = socket$netlink(0x10, 0x3, 0x0)
geteuid()
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r3)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0x9d0000, 0x3, 0x100, <r4=>r0, 0x0, &(0x7f0000000040)={0x980906, 0x6, [], @ptr=0x2}})
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000214000429bd7000ffdbdf25080001000000000008004400", @ANYRES32=r4, @ANYBLOB="050054000000000008000100010000007200540000000000"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x800)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
ioctl(r6, 0x100000890d, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
sendmmsg(r2, &(0x7f0000002c00)=[{{&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="1df4954f4c7e", 0x6}, {&(0x7f00000002c0)="1a35b73f47f1b3bc3741fc721940120f0e0d2c0ca50676f779c542e6793958a42bc836ea1822cbde6818519d8171fd0ab91a4c136ccbb0164506e3f8c7177007bbfe801a7b3c93875facbfaf526000f417ad7dfb568db8564f4fe1afef3ffe2ce25c6f4e83883c0ea0d32c6b71977740c141462982c7e8cf39566f02d341ec66b1efff87", 0x84}], 0x2}}, {{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x3, @empty, 'vlan0\x00'}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000002e40)="359fc1145f9484899e7adbd7b6e68c711428752cb86a8bcb60b789d68e4313f948e1549df709e579d495962829e19f6273e618263fe5956afdd18b27cf3413847a0de5528d9be04191a38a9a52388df9c4b46618adfcea7283872144a2bd785c6a248268d78d2f7f0d1bf95331cfd42b5536daaf19d4f1d74107ad3d2579289a3d1abd36953ced1cdc4a3bff0ced9ef716201bafb9ff5220ba1f1e4e24a98efa02ab70a8ef4d79a8add3e182d86245779da513c82c42d81907697a099ddb9ccc90520f74711f1e2b5375f9777d1babf58474a373c2493168e57cfc7aaff685005e7d9ba84d2b3b54f7592a92bb2dcfffd9af24a4c2f345c1e955f5d8ba2ad8c038d3fa8f8d9f50ce34c8fa015eaa49f650f4fb6406601d7a7b0585da45d1312e4145f67a0f3e9366ac81d8e49c6dcc6111406be1126ed2223f3dd0500f7926f5d5e15c4769dd128f67694a8f71ca82088721d636ef199b155f05e2be278c3c54f81614b1c792ba2b23fe87ecb4a98d8774c6eb38a89405772ef2f2e333c0d9bf7829f5aca8bdcd79c2659ba5e105c9e51eed1f127b5ff04483e060", 0x19b}, {&(0x7f0000002d40)="f22bbf15b3cb83a0b466377cbab76b2127ded516af416a6206ca7935a4fd79bc449a06ae4b7d5f934bcc77226ee8b8298102c8027fda417c8bbe265b1e195a558ae4dfa0bfabd625acd0742e7752338f4145ba99fab29438196b1535c048fa1ba23dcb9847b15a56fd707a96175710c9e5a84fc46384144bf121be68bae5c056c38731605f4de8ba59930b8e9872d164c4a56404f9f44d46cda9122c6c7254dfd8c381cc50249f7b0b95b055018cbc6d6c584b99709ecfd77eaf36064b3bd595d5acb65cfa75799ff11adb90c288", 0xce}], 0x2, &(0x7f0000000740)=[{0x58, 0x114, 0x5, "00ac35819915c44ab47a11dc88cd438b3ea6c396fd16a5e0003ee1db660cf53a3d71622cc84c8eec5a457d8a92fa38d0e2c64025079963ff5dde2a94e8ac3d27a25a22ee"}, {0x60, 0x88, 0x7fff, "7e8715475f475ef79e6c2dd29dd9310af6d55c677f43a18388f35cbfd1dc3cbcedbbb15545a5764120b780445601726670776c009b5c7b88fee1151707461a3c4138bcd73a9662afd1"}, {0x110, 0x11, 0x20, "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"}, {0xe8, 0x0, 0x3, "ea6de859c35dbf1b05704c3e1a0619c48ee001dde10fc3903c4f9845e387e36fda4fd04c72b0037e69b3a5a66c8328cc329d8cb5504c5fb4e78f488fba64a16ae60738b1c855cb263d41452cfcedcf7edf1f236196b9ebeacc05ea822553c31edba7c5a1ca134ef7c9f3e10ee6ed9cc0187f9d633ade0ad1a70770342753b0e3948d32ad14f1ac770999a08aade937e6a20d9bcde4902b494ad72c02b0373b28c2126d31bb215d581b20b80d5e605920438236b08e7f6b84528b6ded6bd4279338e49c116b03f5593937fab4c3e547578b4049"}], 0x2b0}}, {{&(0x7f0000000480)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000500)="48ea2ab4", 0x4}, {&(0x7f0000000540)="cd3ea7dd885c99f8d449f258e91c62627c65cb2d", 0x14}, {&(0x7f0000000a00)="f2c29873a1e80e27120f6f3105ae4f225c312cd505f463bdb62add02bd88f93f9bdad8f6014acdbc8e365469077e6f50c528dde5e141c047b8724c5ffaf1b286bb838b6ee76edec4712787f617976004f71ab6a57064998f4e5f541e7ee50cffc7f61c2b648648f3dc35437e4cd1edff4d541b04e019ed69ff43060b23aa1c7ebd79c79521069900abccfbbbb11e703754203cae632b09740d707ed67730b2949215574f4f05233a3d93c9a9d51f3dcf746e12edd6b65f86292533fbeada25f6badf7aacdb", 0xc5}, {&(0x7f0000000b00)="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", 0xff0}, {&(0x7f0000000580)="8d259b4eeb3d4a6e4460aaf5390149d0f52f84d558e796a908865bcae220eb2da02c2ae2a9ab80f78f06a821a1bcc4829cbf250815d5f71498ca", 0x3a}, {&(0x7f0000001b00)="8d895c3b2f4e61c6504fafdc54d7c086619151eb0bb89f0837a70120d05054291c51a71b7bc106593a9ed10debe284e4475114b32f1456a359006c93bfc43b3c19c2e6c51b79dabb487472cf15a8acfb9df81013d2c211de67a22a56d6168338ca128b40bfae135496", 0x69}, {&(0x7f0000001b80)="07ed53e444daa6c41ce73fcd6d454ad7c72d56ec796865cc67a7d669ff37950eed850a309f77652b52d2167c74023b42b14b84575e7d9bb74b5b017320c947d889e35e9e3966c519faa5735752875d00267541db203380b942361181aa7b5023aec34464609f8e2fb37fbb7447b46f61360dfd0b9cf9cd5906ea3b702681cb1993d6fd1a5fe6e2bd72a140c4c4e33115157c0ff8eba0ed4f6d54b4f70feba0c694d13b8de2511f4ea08b5957e1c5636ad72dfb143ff37b63f3389a2ef56d178376711c8d21f724459eb6dd6da365904e42312215144c1a43f606fbee8eecd36a2b4085a17459522bf723eb7fdf9c3814b6f66848a51fe5568684842626aacf4993f04b1beeeee0f042c4828ae4b8de7204fa430476395ce4150461dae5b65dd2c9a4ea57637f7a2d240e24d9bcfbc431dc198427bbb24abde778a4944e29516bef43c53694eb4e8e4eb77869d7c1503b34295e5e7a270184c2bc79fed76096d9116924bf9fb32d106a4f352af7c1ab727ce26d66dfa28423305ae5bbe7afa96eb908790a1ec126f18e2363542fe18d666b60d587f6eb409380b66837ad00e374bdf6a1b32ee2fea2f279234fd30c278f0064d4c72b1dde45e9ee7796a1500ac314cc66fd5e10e9abe7c89181c59f769ede41543c794f97506f815f89ed9af597f764d2dfd996e8da68fe1cd1e6a3859defccaa122bd194827958e93bce8f788cec767dc9d9f70bf10e258dbbcd28cb9f99e71a676c950a5cb1481dbc28b6c5ca5488de8a558aed8cf96ba8bada51491d9705e10419494495a6feca6d4d2fcad9d98815211fcbc51c80f8560c37797f2782737b90491f2c0e3c620b0f15ab735829880ea33921ec1e6c0289e64422375d0668559d28047f95b841b835618cd098f886120ddd44cdd7f546d659bd22f15ab93d5fd887ba79724c9097841e76ba164ac9ff0eedbb053b38f30dbbbe0a000aeaffd2c1e6af9b41d804facdcb232fd65345c83467b94c91c4a563be4b10b140d111d702f62b6af0962339b80290b80974dc5bb4235b0c0af2af45236c1fb00a14065dbe7fc6e5562f1df62cbc87691a6e2b5a8c634a1f350ed3b0cb0131f950bae88bbdbd555afe2aa8548229e4ab4111b6753b5f91dba8138fb6c022b90508fb779ef3d670cde393f45a37a7aebb755e1ca6565d6c753cb9917da909864381d041d1ba4105224ca1041f7db706c21318cd8e697e2a0f6ed2beedf0c7f41d77526d8c84dd96050123cddc6e9da2f40102f1bfb91ca231a4a3dd1a753026bdadb27dadcec02702b54f9adb25820f8ee09e7f74f3c3d648c72ac5fa6f456fb2ef40a8287a36ef40c8f7b1f2e51b54e411730ebe717514bf06910d2ef18f7796abb9c1aba8d6ebdd7decaa604a6ef47f6a484a1bf6c41d1cf814f97768998ff7236a4a64529f63ee8cc15be7f32450936e01b5ba8ba17e68d8cf536dc939e3166a7e43f285aa428f09238569511b0cf50e1c20e5e9cda60042c7bb2919219f82898365f3ee8af7e24a297318a45b1751fc6dce577789bf4a36e2afc540db2d4bab41082fd127f2eeee95a2cd4b39821330f84d0baab24df630712ec0eca582a65cfa3235fbff8987c1b7ef7b16a68dbe720031f7e10eca22fe6dcc88b7bfe6c08c06e4f6d9026138d8a26e4a67a4fbff9735c79ecd9a864382ada5a6129e02371053190fbd13f0e4842a36d40f1ab8c7dc774e4c619b220eacca8098370753b2eb7ac9ace775f5a978474a438f7d5f0f8e32cbcf88eda4c2d3c3c2031e6c5f4f39a8a823a3b03d906989ab7e96de54a541ed6959510ea59f2680ce16a6fe245b7d6dd376a13a3cbf40dcc92038ed68ba6aaf47785a3ff7d454ae8744b562cc4cc620f423db153797966500732ca9daa9f766de1a164a9701d4fa6f9685c30c226502ca8cd63e6f157a53d8dc82c74547bad79b95931b4627fcc2456dcf7d32d2cd19840bc8000d4c20d9c5b0e9d150c4b812706e948cda319a516db09dcfab96baea9e24ce51dcaeb5f3c80330657b5c1ea8ad3a5345789ef16a1f1854eee87dcfd90682e0d2bcd2e487cc225d1961154fdee2838ee7225eb74317269c033830194903d22af7a024327aa6ef35d9fc55b5dd3982c889a7994d5661bf73b53b0cc20bdf9a8fafef5a126d9fe7862dfa40edb91c9ce67af805ba2e831ac3059043e5ea16e38f414e6d97d873b431fae236cf8c2c45ebb5fa43514e0abbafaf8314732c5aef4f451d74c0fe0fd2b2a9e23695113ceae8f93130ab90dd680dbba0fe1341ca30b97a3824c22fe262bbd5577a231abd552d55a648e4cdc1a21566deafc6feca213fd5ab504b822c9789db7341efedfe6dd96f005013db02dfd28954da471e065ff98b6e255b0d6a120cb520a803884116ae8d9c129065b909de5db1279d26d87f614633673394376b51d70118751de4b1352dc8ed441347b9c8dfc0bd108213dd83176fe415a7be2dcd2ac2aa304b40e5e0f51a9f92fe035eaf1c9a885b99d313852ac17f3bbba1c9636eb5d2428aaaad3416f37207b713b18689640b9406c8daafd65e7d30f00392357ccc6cba3336787eb14ffb381870aabb85adceb0983813bae15e738a9b919a390fbf12463ffbe2dcf408f03882022d3f12f81bde3e34e09b26899bb9560e74476261e1eb7d9a1c3e5f1a5fa491468861df30d5e8f7905e906a15e724aeeefa907e20495e0d76246137aafffed2c7e1f955283961e411da82100697b6144f2e88ac324c4026381ca9908c4320cba4efd518d885abcd1518541da2176669423bd123a56cfe39bc6b9ba86d3029780107e983aace31f929adb1427ae9c60ac4318b18a478d081f1a76a5d49093583575cfd79c07c94ce6f0e37bca3d0925a0234c32a78b83009d42758fec8b3ea5bd3f5b74bec85ab490d8b7ff1e8d7fad4da70cbe79fb4ea768a57c1d23516c048179f966dace6b6be06606f1fd68176df07a684b7da63abea1b019c617aacc9eb5a0550741c821e26d98a92cc4e1b5dd86a885b3952e6d5fbdb1b5a932b43c93d71d279d8a546cb01602a5d8dcdb137184577834316ff61143c7c148aad66362f6a9daa14939375b9fdc56a7eac6afd0ea4798adc8cbe4b9dcef9d3b441b127937c5cea29ab468e0b56f297e1b44f73022e5fc52d93fca06823436dfb6687e5270c57a1b0d36b6ac85bfb4146f8b8b255108be25cc499bc3067021cb2938dc5c9e996bae0f3eb97d7e0ea32d983a5179f9564121e21c405d6e41d9bd4cf34354b64e092745216df0988356d8c65fb4721c624cdb86461a390fb42b948de2ceb418ea2508ba5af36fd540d6f31b64bbd7f76e5c95818dc31f6a4e7558abe6880793db6c31e4036fc7ffda12b5ee1b6676bb5bd7405475e0cc8d40ea0853f56d37189f012c045e6ec9ed58bf2b9105c34cdd0a74e4645607a0279dfdbad8905c9a8c201fd3011c6989a27f75d73fe3801c8caa3ad6926dad2709cd9ba726fe5ed003ce38c83f86afc7f7e691f5c4ffb083608c4be4b0b96c328279551b14159e0b98a8f3ff6027bf430c6b3ad82e38b35d3219cd6c1f93279e1ecbd33eb45f78b79360ae00a95267dcd0bea13224949a114f87243ed2c3311cff38a7abf1da470bb8e6b7ceaa4cc911aee393b3eeb359e7887350437e050509b7423dedbbc8e744928afa87786965bcc3dad853332a536af7319bbf504753127a4bf6bb93aebcf14dc735f8ad5adaba105dba4f95a51c282ae00e13cd7703fd0a6569ff411cb113a616c09608bf3a81a535300895d392bade254d7b1742f5d77f5975d28cfd1a44c6d6715fb2dfb1f8163e9feb12fffe4d14e47b9d793bdb1b49bc459d81fc7245bcd1a17c9ec4401acfb2ea6088eccbd5788971dde69cd66d79bd8fd4ba019397a08819c6492d798245385231e63787126310ed255f6648f30addb3e5be919ba9f71ccb069556feb76a6563bdf5543062ff3c1e66cc8e1c44cc7de9f54d471dd1e71e29cee33ba3f68c28b6c2f0e90a69e1b549810e64435b55d5b34a1c5d15dabd028e5d8a34b18ac97b569d7936fe384d40b0b6d1142c6c3cf595f18c0f76e1f452ef9aee09b4c1111d798ee5e528a6478ee92814eda8390bfa1af732e909d266340753352b77ac70614e205f059edd75f2e256dc22e83a35c0c9cdfb5487bb95033e07c61ab2db18465c813738c501a3236bf2dd75ef2c368b974bd1aaf7921871266f90d903caf56c7223b8e8633d91942205f28f80dd5bb9cb3e55e613e47489b5763c4566b3b628d910ea7d5e7092157c8e1c50cda12032f32ad242d2034272e3ee41c8ffeb6280b4e3c93eae285431e35d74427e0884f61c9aac4434342137f45ded7c56142b6e63bef50dca7e5e22f2ea785f6e366fe143dad88ef4a312d5a4a9b8bda75fc690bde172dfba47f48a6eadf0a1c2c0569cba0afcf1ee91a8eb415a1938e10d1ade27ca962620b6692891b26e2f26b409b8c96b592cf0d19d0f5d9374ee0f472c9fbdf9ba9cc08245c68775683a353eeebe4ef9f9364a2168607a5ab031efbc050e240ce84ecf7efd30c28e4f292d2d270f01e02ff42a12c8e91c195db8300f79e0cb2ce0edc312722694e3d6a4d61e305f6bc34069fc1944622a2ac52d0126029bb25101f890f209c1f4ccb9221ce61d2c0b661df4b2154703652f5dde48d3dfb02e061ad08fe6f7ce106d2a2ce439a7a81e36d04b846b0a05ae7221b45d4dbb6f6695777829accd9305eaeab3d9dfc1bb332dc098957b0677f94c07f1d1a36ec2233a026fa157c3f00b040ff1b0b22d7a766c731e79b154bf9103f4ff692d35ca4aaf6f3d54edddb7521de8257dbd7b04d37511a3f807c492e784ee0215b2dcc08bba546396e296d6906bf7b839552cdfe9da56c0778d84d41401aa29c4feaa354bc820f77e976219274b6eecae1ca1aaffa01c6f30c3d1dcdba097f3fa4e4a909df7d548aa71a1b20120f6f5f13bf984e80e05fac039567989ca1f4e41467f7e7fbac8df47720c26b9065dad5736f6dc59adb589a435f537c9cad76bfd353c69ad429ee3066538b30642a54cfa7f6f670bffb11262a8681e2da1363de7d9a629dbc72f4379160f2c0b9101b281a8f786adbc8b9b5c9e267319423051778008aacc1d9b1f09378072f6159cd592f1d651ecf57cd462f3daa7ee5cdcffed2342d25e4fab2136cde3381d054672f7ee234264f6f393617615d2153f9a4e39a91beeb3c872ec22463ac78d5fe44c3885a4109b54494916b9b84b704919af17ffe5dac15caa01187c07f38214a37cea2b8b644048ba1f892782b37330845fe9b8fac96595c63d15a9ec638f39cfbeb80407140be724d62a37810f45760ef64d1ddba78ea2aad68d05ffddfef204447d2004ce6878f102f0afe2868169383d695c451ae941ec7508a176b7c618f4049914343e59dd36c905df4e54cc53fad54c64603a93eced7424e4defcf1f4460c4c182901ed2c312b5cbd783946d0ce02e89434a9d7bfa52c8d66502b4fc2745d3784bc0400ea125d34403af59253e3d5b962b2046807c60cbb6ab1eb151879b13994db51192e9b2f8c30d391ba4ec993c0b35d89e7ec6f1d403f092bbd0ff3641e0b544f0c8451185728ce24038551b5ffa747c74a9db3eaa0daa9c35f804ada61356a6c47447b13b26d3b98f787040c9a1fe5d603bf760f0d56eed4c16b66020d64cdce3e7739ce44ea3cc3f86d4be57184c482ce505abbb8c11e116b4d3e485b69fdb571d573225411ea13dfa91bd9432765508699606faa62c919c1f055d65a0", 0x1000}], 0x7}}], 0x3, 0x4091)
r7 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x91)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x2)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000000c0))

04:16:00 executing program 2:
socket$rds(0x15, 0x5, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000180)=@ax25={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default, @bcast, @null]}, 0x80)
r3 = socket$phonet(0x23, 0x2, 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x325, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
writev(r5, &(0x7f0000000500)=[{&(0x7f0000000240)="f4", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x13, r5, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x80045503, &(0x7f0000000200))
sendto(r3, &(0x7f0000000340)="57e5987f910d5286b156df9fc5b18cc742a06aa10f8722d97f6cb8bc4a7ba20a167998bf9893dd6d47ea303e88123dbe79313bd1f55e4eecd08f9e476fe174fe2ed5c84d3691408791af12f6ab8803f484932ebcb0238af302995c2f63b037dbf0588cbed22b892c6c130e934d64bb69f42357e2c863cbf4fe1d3ce8d7083f49a5a673917ebf501a753c94091a2b319aca247bb211", 0x95, 0x4000, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x2}}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r11}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r10, @multicast1, @loopback}, 0xc)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r13, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r14, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ab61333962"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

04:16:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xe56, &(0x7f0000000200))

04:16:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b46, &(0x7f0000000200))

04:16:00 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = getpid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000000))
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r6, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000002300)=""/4099, 0x1003})
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r8)
r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r9)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r11)
ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f00000000c0)={0x80, 0x9, {<r12=>r6}, {r11}, 0xffffffffffe, 0x80000001})
r13 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
fcntl$getownex(r13, 0x10, &(0x7f0000000140)={0x0, <r14=>0x0})
r15 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x501082, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000005800000429bd7000fedbdf25000800010002000000080001000200000008000200", @ANYRES32=r5, @ANYBLOB="0800c400ce5944afcf5e3594fa010000d65788a56c", @ANYRES32=r12, @ANYBLOB="6d910200", @ANYRES32=r14, @ANYBLOB="08ccba0fac3c534c29630000", @ANYRES32=r15, @ANYBLOB="0800010004003d00004400"], 0x9}}, 0x0)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x10, r4, 0x1, 0x7, 0x6, @random="bca2e513d88c"}, 0x14)
socket$inet_tcp(0x2, 0x3, 0x6)
r16 = socket$netlink(0x10, 0x3, 0x4)
r17 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r17, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$nl_generic(r16, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r17, @ANYRES16=0x0], 0x2}}, 0x20000850)

04:16:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r3)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r5 = pidfd_getfd(r3, r4, 0x0)
recvfrom$l2tp(r5, &(0x7f0000000440)=""/254, 0xfe, 0x2002, &(0x7f0000000180)={0x2, 0x0, @initdev}, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "486d8f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "734aa0e02797a6089597639513"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4001)
r7 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b47, &(0x7f0000000200))

04:16:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xf54, &(0x7f0000000200))

04:16:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000))

04:16:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200))

04:16:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x6, &(0x7f00000000c0)="080db5055e0bcfe847a0712574ebed7d00105f6a2c11e5ad1ca769007cc5b18024d8966c69c6000000008133d2f793d96a2016458cec6dc4c998b46d969b6b00d2a0dec4c1dd0f4fd297f8bb5b2bf0a385e0993f4201f9aeac954fbccdcd060dec6e4fb31383e609821f700b906ec6a6bd3f23a323c16af80be23bba3ca6c0fc94143d8c1e79960e2493bde3adb9ebf30f")
socket$inet_tcp(0x2, 0x3, 0x6)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0)
ioctl$TCGETX(r2, 0x5432, &(0x7f00000001c0))
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x80)

04:16:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xf56, &(0x7f0000000200))

04:16:01 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x121000, 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x9, 0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r6, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x702, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$PIO_FONT(r2, 0x4b49, &(0x7f0000000200)="9b")

04:16:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r2, 0x4e, 0x33}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'michael_mic\x00'}}, &(0x7f0000000140)="efc5adc8e70ca7d890f6a297df66ff3da1de96e6695990189fa20be3d127d07fe447b5d01396e5881e890767bb15e7e238661742ea268439f1c9f3e2e1dec2bdd154699d181e114abc893cd34da7", &(0x7f0000000040)=""/51)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
mount(&(0x7f0000000200)=@sg0='/dev/sg0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='iso9660\x00', 0x200008, &(0x7f00000002c0)='user\x00')

04:16:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1054, &(0x7f0000000200))

04:16:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4a, &(0x7f0000000200))

04:16:01 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)="d1ff8c4125ab")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x8, 0x401)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
poll(&(0x7f0000000080)=[{r1, 0x3000}, {0xffffffffffffffff, 0x8092}, {r2, 0x1000}, {0xffffffffffffffff, 0xa}, {r0, 0x4242}, {r0, 0x1001}, {r3, 0x89}, {r4, 0x146}, {r5, 0xc562}], 0x9, 0x9)

04:16:01 executing program 5 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1254, &(0x7f0000000200))

04:16:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

[  886.810388][T22678] FAULT_INJECTION: forcing a failure.
[  886.810388][T22678] name failslab, interval 1, probability 0, space 0, times 0
[  886.847552][T22678] CPU: 0 PID: 22678 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0
[  886.856284][T22678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  886.866360][T22678] Call Trace:
[  886.869701][T22678]  dump_stack+0x197/0x210
[  886.874152][T22678]  should_fail.cold+0x5/0xd
[  886.878687][T22678]  ? fault_create_debugfs_attr+0x140/0x140
[  886.884530][T22678]  ? ___might_sleep+0x163/0x2c0
[  886.889423][T22678]  __should_failslab+0xb7/0x100
[  886.894300][T22678]  should_failslab+0x9/0x14
[  886.898956][T22678]  __kmalloc+0x2e0/0x770
[  886.903256][T22678]  ? mark_held_locks+0xf0/0xf0
04:16:01 executing program 1:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  886.908174][T22678]  ? mark_lock+0xc2/0x1220
[  886.912726][T22678]  ? _parse_integer+0x190/0x190
[  886.917602][T22678]  ? tomoyo_realpath_from_path+0xc5/0x660
[  886.923421][T22678]  tomoyo_realpath_from_path+0xc5/0x660
[  886.928990][T22678]  ? tomoyo_path_number_perm+0x193/0x520
[  886.934654][T22678]  tomoyo_path_number_perm+0x1dd/0x520
[  886.940125][T22678]  ? tomoyo_path_number_perm+0x193/0x520
[  886.945785][T22678]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  886.951610][T22678]  ? perf_trace_lock_acquire+0xf5/0x530
[  886.957261][T22678]  ? __fget_files+0x359/0x520
[  886.961971][T22678]  ? ksys_dup3+0x3e0/0x3e0
[  886.966406][T22678]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  886.972659][T22678]  ? fput_many+0x12c/0x1a0
[  886.977109][T22678]  tomoyo_file_ioctl+0x23/0x30
[  886.981903][T22678]  security_file_ioctl+0x77/0xc0
[  886.986874][T22678]  ksys_ioctl+0x56/0x180
[  886.991156][T22678]  __x64_sys_ioctl+0x73/0xb0
[  886.995868][T22678]  do_syscall_64+0xfa/0x790
[  887.000407][T22678]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  887.006312][T22678] RIP: 0033:0x45c429
[  887.010220][T22678] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  887.029836][T22678] RSP: 002b:00007f37353a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  887.038290][T22678] RAX: ffffffffffffffda RBX: 00007f37353a16d4 RCX: 000000000045c429
[  887.046287][T22678] RDX: 0000000020000000 RSI: 0000000000004b4a RDI: 0000000000000003
[  887.054298][T22678] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  887.062293][T22678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  887.070287][T22678] R13: 0000000000000372 R14: 00000000004c5a0d R15: 0000000000000000
04:16:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4c, &(0x7f0000000200))

04:16:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1289, &(0x7f0000000200))

04:16:02 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xb6, 0x5ad4, 0x20, 0x80}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)
socket$inet_tcp(0x2, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  887.306054][T22678] ERROR: Out of memory at tomoyo_realpath_from_path.
04:16:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4d, &(0x7f0000000200))

04:16:02 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x220000, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000200)="9b")

04:16:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1354, &(0x7f0000000200))

04:16:02 executing program 5 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1454, &(0x7f0000000200))

04:16:02 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000))
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
prctl$PR_SET_UNALIGN(0x6, 0x2)

[  887.708035][T22983] FAULT_INJECTION: forcing a failure.
[  887.708035][T22983] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  887.721384][T22983] CPU: 1 PID: 22983 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0
[  887.730096][T22983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  887.740349][T22983] Call Trace:
[  887.743668][T22983]  dump_stack+0x197/0x210
[  887.748038][T22983]  should_fail.cold+0x5/0xd
[  887.752574][T22983]  ? fault_create_debugfs_attr+0x140/0x140
[  887.758460][T22983]  ? __kasan_check_read+0x11/0x20
[  887.763505][T22983]  ? mark_lock+0xc2/0x1220
[  887.767938][T22983]  ? kernel_text_address+0xe9/0x110
[  887.773288][T22983]  should_fail_alloc_page+0x50/0x60
[  887.778613][T22983]  __alloc_pages_nodemask+0x1a1/0x910
[  887.784004][T22983]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  887.790266][T22983]  ? debug_smp_processor_id+0x33/0x18a
[  887.795751][T22983]  ? __alloc_pages_slowpath+0x2900/0x2900
[  887.801482][T22983]  ? __kasan_check_read+0x11/0x20
[  887.806525][T22983]  cache_grow_begin+0x90/0xc60
[  887.811319][T22983]  ? trace_hardirqs_off+0x62/0x240
[  887.816452][T22983]  __kmalloc+0x6b2/0x770
[  887.820695][T22983]  ? mark_held_locks+0xf0/0xf0
[  887.825448][T22983]  ? mark_lock+0xc2/0x1220
[  887.829866][T22983]  ? tomoyo_realpath_from_path+0xc5/0x660
[  887.835590][T22983]  tomoyo_realpath_from_path+0xc5/0x660
[  887.841147][T22983]  ? tomoyo_path_number_perm+0x193/0x520
[  887.846777][T22983]  tomoyo_path_number_perm+0x1dd/0x520
[  887.852242][T22983]  ? tomoyo_path_number_perm+0x193/0x520
[  887.857906][T22983]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  887.863704][T22983]  ? perf_trace_lock_acquire+0xf5/0x530
[  887.869295][T22983]  ? __fget_files+0x359/0x520
[  887.873993][T22983]  ? ksys_dup3+0x3e0/0x3e0
[  887.878417][T22983]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  887.884677][T22983]  ? fput_many+0x12c/0x1a0
[  887.889106][T22983]  tomoyo_file_ioctl+0x23/0x30
[  887.893896][T22983]  security_file_ioctl+0x77/0xc0
[  887.898853][T22983]  ksys_ioctl+0x56/0x180
[  887.903094][T22983]  __x64_sys_ioctl+0x73/0xb0
[  887.907685][T22983]  do_syscall_64+0xfa/0x790
[  887.912188][T22983]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  887.918079][T22983] RIP: 0033:0x45c429
[  887.921978][T22983] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  887.941597][T22983] RSP: 002b:00007f37353a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  887.950007][T22983] RAX: ffffffffffffffda RBX: 00007f37353a16d4 RCX: 000000000045c429
04:16:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4e, &(0x7f0000000200))

[  887.958030][T22983] RDX: 0000000020000000 RSI: 0000000000004b4a RDI: 0000000000000003
[  887.966008][T22983] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  887.973983][T22983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  887.981944][T22983] R13: 0000000000000372 R14: 00000000004c5a0d R15: 0000000000000001
04:16:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b52, &(0x7f0000000200))

04:16:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1554, &(0x7f0000000200))

04:16:03 executing program 2:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b49, &(0x7f0000000200)="9b")
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d756e69782c702f73697839146d3eae61636c2c6c6f6f73652c6163636573733d757365722c706f73697861636c2c706f73697861636c2c41707072616973655f747970653d696d617369672c7065726d69745f646972656374696f", @ANYRESDEC=r1, @ANYBLOB=',smackfsfloor=posixacl,\x00'])
r2 = semget(0x0, 0x3, 0x26)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fadvise64(r0, 0x11ae, 0x1, 0x4)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000140)={0x53, 0xbc, 0xffff, {0x1, 0x7}, {0x9, 0x101}, @ramp={0xfff, 0x29a9, {0x4, 0x2, 0x1, 0xf000}}})
r4 = socket(0x40000000002, 0x3, 0x2)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x5)
recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000180)=""/120, &(0x7f0000000240)=0x78)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
io_setup(0x4, &(0x7f0000000180)=<r6=>0x0)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
io_submit(r6, 0x1, &(0x7f00000024c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}])
io_destroy(r6)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x8200)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
utimensat(r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x100)
semctl$IPC_RMID(r2, 0x0, 0x0)

04:16:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:03 executing program 5 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1654, &(0x7f0000000200))

04:16:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b60, &(0x7f0000000200))

04:16:03 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200)="9b")
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)

04:16:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x20000000)

[  888.654853][T23335] FAULT_INJECTION: forcing a failure.
[  888.654853][T23335] name failslab, interval 1, probability 0, space 0, times 0
[  888.718514][T23335] CPU: 0 PID: 23335 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0
[  888.727243][T23335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  888.737316][T23335] Call Trace:
[  888.740661][T23335]  dump_stack+0x197/0x210
[  888.745030][T23335]  should_fail.cold+0x5/0xd
[  888.749574][T23335]  ? fault_create_debugfs_attr+0x140/0x140
[  888.755417][T23335]  ? ___might_sleep+0x163/0x2c0
[  888.760295][T23335]  __should_failslab+0xb7/0x100
[  888.765175][T23335]  should_failslab+0x9/0x14
[  888.769703][T23335]  __kmalloc+0x2e0/0x770
[  888.773969][T23335]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  888.780223][T23335]  ? d_absolute_path+0x11b/0x170
[  888.785426][T23335]  ? __d_path+0x140/0x140
[  888.789775][T23335]  ? tomoyo_encode2.part.0+0xf5/0x400
[  888.795177][T23335]  tomoyo_encode2.part.0+0xf5/0x400
[  888.800411][T23335]  tomoyo_encode+0x2b/0x50
[  888.804847][T23335]  tomoyo_realpath_from_path+0x19c/0x660
[  888.810514][T23335]  tomoyo_path_number_perm+0x1dd/0x520
[  888.815990][T23335]  ? tomoyo_path_number_perm+0x193/0x520
[  888.821672][T23335]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  888.827500][T23335]  ? perf_trace_lock_acquire+0xf5/0x530
[  888.833139][T23335]  ? __fget_files+0x359/0x520
[  888.837853][T23335]  ? ksys_dup3+0x3e0/0x3e0
[  888.842291][T23335]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  888.848550][T23335]  ? fput_many+0x12c/0x1a0
[  888.853014][T23335]  tomoyo_file_ioctl+0x23/0x30
[  888.857804][T23335]  security_file_ioctl+0x77/0xc0
[  888.862770][T23335]  ksys_ioctl+0x56/0x180
04:16:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200))

[  888.867050][T23335]  __x64_sys_ioctl+0x73/0xb0
[  888.871680][T23335]  do_syscall_64+0xfa/0x790
[  888.876219][T23335]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  888.882127][T23335] RIP: 0033:0x45c429
[  888.886038][T23335] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  888.905662][T23335] RSP: 002b:00007f37353a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
04:16:03 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl(r2, 0x1000008916, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  888.914196][T23335] RAX: ffffffffffffffda RBX: 00007f37353a16d4 RCX: 000000000045c429
[  888.922191][T23335] RDX: 0000000020000000 RSI: 0000000000004b4a RDI: 0000000000000003
[  888.930185][T23335] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  888.938175][T23335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  888.946348][T23335] R13: 0000000000000372 R14: 00000000004c5a0d R15: 0000000000000002
04:16:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1854, &(0x7f0000000200))

04:16:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200)="9b")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x4)

04:16:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b62, &(0x7f0000000200))

04:16:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1b54, &(0x7f0000000200))

04:16:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$KDDISABIO(r1, 0x4b37)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200)="9b")

[  889.712801][T23335] ERROR: Out of memory at tomoyo_realpath_from_path.
04:16:04 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b63, &(0x7f0000000200))

04:16:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1c54, &(0x7f0000000200))

04:16:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x41)

04:16:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r1, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
ptrace$setsig(0x4203, r1, 0x7bf, &(0x7f0000000000)={0x1f, 0x7fff, 0x8})
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200)="9b")
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x13f, 0x7}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x1}}, 0x18)

04:16:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b64, &(0x7f0000000200))

04:16:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1d54, &(0x7f0000000200))

04:16:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESHEX], 0x3}}, 0x80)

04:16:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x2, &(0x7f0000000000)=""/80)

04:16:05 executing program 2 (fault-call:16 fault-nth:0):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:05 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='\x00', 0x1, 0x2)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b65, &(0x7f0000000200))

04:16:05 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1e54, &(0x7f0000000200))

04:16:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5, &(0x7f0000000000)=""/80)

04:16:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b66, &(0x7f0000000200))

04:16:05 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xe0, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000)

[  890.537704][   T26] audit: type=1804 audit(1582431365.518:375): pid=23906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/905/bus" dev="sda1" ino=16754 res=1
[  890.584775][T23906] FAULT_INJECTION: forcing a failure.
[  890.584775][T23906] name failslab, interval 1, probability 0, space 0, times 0
04:16:05 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x1f54, &(0x7f0000000200))

[  890.655867][T23906] CPU: 0 PID: 23906 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0
[  890.664596][T23906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  890.674668][T23906] Call Trace:
[  890.678007][T23906]  dump_stack+0x197/0x210
[  890.678043][T23906]  should_fail.cold+0x5/0xd
[  890.678059][T23906]  ? debug_smp_processor_id+0x33/0x18a
04:16:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x10, &(0x7f0000000000)=""/80)

04:16:05 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x4)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
read$char_usb(r1, &(0x7f0000000000)=""/25, 0x19)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[]}}, 0x8000)

[  890.678084][T23906]  ? fault_create_debugfs_attr+0x140/0x140
04:16:05 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2154, &(0x7f0000000200))

[  890.678105][T23906]  ? ___might_sleep+0x163/0x2c0
[  890.678131][T23906]  __should_failslab+0xb7/0x100
04:16:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x2405, &(0x7f0000000000)=""/80)

[  890.678149][T23906]  should_failslab+0x9/0x14
[  890.678167][T23906]  kmem_cache_alloc_node_trace+0x274/0x750
04:16:06 executing program 2 (fault-call:16 fault-nth:1):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  890.678182][T23906]  ? lock_downgrade+0x920/0x920
[  890.678214][T23906]  __kmalloc_node+0x3d/0x70
[  890.678325][T23906]  kvmalloc_node+0x68/0x100
04:16:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  890.678402][T23906]  xt_alloc_table_info+0x41/0xa0
[  890.678427][T23906]  do_ipt_set_ctl+0x260/0x4c2
[  890.678451][T23906]  ? compat_do_ipt_set_ctl+0x170/0x170
[  890.678494][T23906]  ? mutex_unlock+0xd/0x10
04:16:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b2f, &(0x7f0000000000)=""/80)

04:16:06 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2254, &(0x7f0000000200))

[  890.678533][T23906]  ? nf_sockopt_find.constprop.0+0x226/0x290
[  890.678556][T23906]  nf_setsockopt+0x77/0xd0
[  890.678606][T23906]  ip_setsockopt+0xdf/0x100
[  890.678645][T23906]  udp_setsockopt+0x68/0xb0
04:16:06 executing program 2 (fault-call:16 fault-nth:2):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  890.678667][T23906]  sock_common_setsockopt+0x94/0xd0
[  890.678686][T23906]  __sys_setsockopt+0x261/0x4c0
[  890.678706][T23906]  ? sock_create_kern+0x50/0x50
[  890.678727][T23906]  ? fput+0x1b/0x20
[  890.678763][T23906]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  890.678780][T23906]  ? do_syscall_64+0x26/0x790
[  890.678797][T23906]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  890.678814][T23906]  ? do_syscall_64+0x26/0x790
[  890.678839][T23906]  __x64_sys_setsockopt+0xbe/0x150
[  890.678866][T23906]  do_syscall_64+0xfa/0x790
[  890.678892][T23906]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  890.678914][T23906] RIP: 0033:0x45c429
[  890.678934][T23906] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  890.678943][T23906] RSP: 002b:00007fc5dd27ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  890.678959][T23906] RAX: ffffffffffffffda RBX: 00007fc5dd27f6d4 RCX: 000000000045c429
[  890.678970][T23906] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000a
[  890.678979][T23906] RBP: 000000000076bf20 R08: 0000000000000358 R09: 0000000000000000
[  890.678988][T23906] R10: 0000000020000200 R11: 0000000000000246 R12: 000000000000000b
[  890.678996][T23906] R13: 0000000000000a34 R14: 00000000004cc994 R15: 0000000000000000
[  890.760583][   T26] audit: type=1804 audit(1582431365.538:376): pid=23906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/905/bus" dev="sda1" ino=16754 res=1
[  891.234964][   T26] audit: type=1804 audit(1582431366.208:377): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/906/bus" dev="sda1" ino=16690 res=1
[  891.262004][   T26] audit: type=1804 audit(1582431366.238:378): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/906/bus" dev="sda1" ino=16690 res=1
[  891.287845][T23935] FAULT_INJECTION: forcing a failure.
[  891.287845][T23935] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  891.287866][T23935] CPU: 1 PID: 23935 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0
[  891.287876][T23935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  891.287882][T23935] Call Trace:
[  891.287907][T23935]  dump_stack+0x197/0x210
[  891.287939][T23935]  should_fail.cold+0x5/0xd
[  891.287958][T23935]  ? debug_smp_processor_id+0x33/0x18a
[  891.287985][T23935]  ? fault_create_debugfs_attr+0x140/0x140
[  891.288001][T23935]  ? rcu_read_unlock+0x16/0x60
[  891.288018][T23935]  ? find_held_lock+0x35/0x130
[  891.288048][T23935]  should_fail_alloc_page+0x50/0x60
[  891.288065][T23935]  __alloc_pages_nodemask+0x1a1/0x910
[  891.288082][T23935]  ? lock_downgrade+0x920/0x920
[  891.288106][T23935]  ? __alloc_pages_slowpath+0x2900/0x2900
[  891.288141][T23935]  ? rcu_read_unlock+0x2e/0x60
[  891.288170][T23935]  cache_grow_begin+0x90/0xc60
[  891.288194][T23935]  ? trace_hardirqs_off+0x62/0x240
[  891.288221][T23935]  kmem_cache_alloc_node_trace+0x689/0x750
[  891.288234][T23935]  ? lock_downgrade+0x920/0x920
[  891.288272][T23935]  __kmalloc_node+0x3d/0x70
[  891.288303][T23935]  kvmalloc_node+0x68/0x100
[  891.288328][T23935]  xt_alloc_table_info+0x41/0xa0
[  891.288358][T23935]  do_ipt_set_ctl+0x260/0x4c2
[  891.288381][T23935]  ? compat_do_ipt_set_ctl+0x170/0x170
[  891.288423][T23935]  ? mutex_unlock+0xd/0x10
[  891.288441][T23935]  ? nf_sockopt_find.constprop.0+0x226/0x290
[  891.288467][T23935]  nf_setsockopt+0x77/0xd0
[  891.288496][T23935]  ip_setsockopt+0xdf/0x100
[  891.288523][T23935]  udp_setsockopt+0x68/0xb0
[  891.288550][T23935]  sock_common_setsockopt+0x94/0xd0
[  891.288576][T23935]  __sys_setsockopt+0x261/0x4c0
[  891.288599][T23935]  ? sock_create_kern+0x50/0x50
[  891.288619][T23935]  ? fput+0x1b/0x20
[  891.288653][T23935]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  891.288671][T23935]  ? do_syscall_64+0x26/0x790
[  891.288689][T23935]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  891.288705][T23935]  ? do_syscall_64+0x26/0x790
[  891.288733][T23935]  __x64_sys_setsockopt+0xbe/0x150
[  891.288759][T23935]  do_syscall_64+0xfa/0x790
[  891.288785][T23935]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  891.288796][T23935] RIP: 0033:0x45c429
[  891.288812][T23935] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
04:16:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b67, &(0x7f0000000200))

04:16:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b30, &(0x7f0000000000)=""/80)

04:16:06 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2354, &(0x7f0000000200))

04:16:07 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2454, &(0x7f0000000200))

[  891.288821][T23935] RSP: 002b:00007fc5dd27ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  891.288836][T23935] RAX: ffffffffffffffda RBX: 00007fc5dd27f6d4 RCX: 000000000045c429
[  891.288853][T23935] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000a
[  891.288866][T23935] RBP: 000000000076bf20 R08: 0000000000000358 R09: 0000000000000000
[  891.288876][T23935] R10: 0000000020000200 R11: 0000000000000246 R12: 000000000000000b
[  891.288886][T23935] R13: 0000000000000a34 R14: 00000000004cc994 R15: 0000000000000001
04:16:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b68, &(0x7f0000000200))

04:16:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639accf832fa91d7b8d0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9a3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcdecfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3000000000000000000001a15a32dc996f893743b568ecf66ae6d0b05f79cc385daa1faf2a6515b55992fe16dc7a3fcd8ce3381e0a35e745ab7ebd8fd1404fe8fa4e02a869ab580b0443c8e5745f663ce1c32b01e9b770f7d632db7aac6a0b47d044064f45a90a2e095681f3bcad0aa34f31346882dc6c2c002b02939015a33e0b456468ff96f37e69d6a7d2970"], 0x48}}, 0x80)

04:16:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b31, &(0x7f0000000000)=""/80)

[  891.289162][T23935] xt_CT: You must specify a L4 protocol and not use inversions on it
[  891.612158][   T26] audit: type=1804 audit(1582431366.588:379): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/907/bus" dev="sda1" ino=16657 res=1
[  891.649597][   T26] audit: type=1804 audit(1582431366.608:380): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/907/bus" dev="sda1" ino=16657 res=1
[  891.871708][T23951] FAULT_INJECTION: forcing a failure.
[  891.871708][T23951] name failslab, interval 1, probability 0, space 0, times 0
[  892.196040][T23951] CPU: 0 PID: 23951 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0
[  892.204863][T23951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  892.214938][T23951] Call Trace:
[  892.218253][T23951]  dump_stack+0x197/0x210
[  892.222608][T23951]  should_fail.cold+0x5/0xd
[  892.227142][T23951]  ? fault_create_debugfs_attr+0x140/0x140
[  892.232990][T23951]  ? ___might_sleep+0x163/0x2c0
[  892.237871][T23951]  __should_failslab+0xb7/0x100
[  892.242737][T23951]  should_failslab+0x9/0x14
[  892.247257][T23951]  kmem_cache_alloc_node_trace+0x274/0x750
[  892.253200][T23951]  ? __kasan_check_read+0x11/0x20
[  892.258244][T23951]  ? __lock_acquire+0x16f2/0x4a00
[  892.263302][T23951]  __kmalloc_node+0x3d/0x70
[  892.267836][T23951]  kvmalloc_node+0x68/0x100
[  892.272356][T23951]  xt_alloc_entry_offsets+0x3f/0x50
[  892.277575][T23951]  translate_table+0x21c/0x17d0
[  892.282458][T23951]  ? lock_downgrade+0x920/0x920
[  892.287358][T23951]  ? compat_do_ipt_get_ctl+0x910/0x910
[  892.292965][T23951]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  892.299230][T23951]  ? _copy_from_user+0x12c/0x1a0
[  892.304329][T23951]  do_ipt_set_ctl+0x2fe/0x4c2
[  892.309036][T23951]  ? compat_do_ipt_set_ctl+0x170/0x170
[  892.314544][T23951]  ? mutex_unlock+0xd/0x10
[  892.318983][T23951]  ? nf_sockopt_find.constprop.0+0x226/0x290
[  892.324990][T23951]  nf_setsockopt+0x77/0xd0
[  892.329441][T23951]  ip_setsockopt+0xdf/0x100
[  892.334083][T23951]  udp_setsockopt+0x68/0xb0
[  892.338617][T23951]  sock_common_setsockopt+0x94/0xd0
[  892.343848][T23951]  __sys_setsockopt+0x261/0x4c0
[  892.348723][T23951]  ? sock_create_kern+0x50/0x50
[  892.353593][T23951]  ? fput+0x1b/0x20
[  892.357441][T23951]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  892.362927][T23951]  ? do_syscall_64+0x26/0x790
[  892.367621][T23951]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  892.373702][T23951]  ? do_syscall_64+0x26/0x790
[  892.378417][T23951]  __x64_sys_setsockopt+0xbe/0x150
[  892.383555][T23951]  do_syscall_64+0xfa/0x790
[  892.388093][T23951]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  892.394003][T23951] RIP: 0033:0x45c429
[  892.397912][T23951] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  892.417528][T23951] RSP: 002b:00007fc5dd27ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  892.425957][T23951] RAX: ffffffffffffffda RBX: 00007fc5dd27f6d4 RCX: 000000000045c429
[  892.434060][T23951] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000a
04:16:07 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2554, &(0x7f0000000200))

[  892.442051][T23951] RBP: 000000000076bf20 R08: 0000000000000358 R09: 0000000000000000
[  892.450055][T23951] R10: 0000000020000200 R11: 0000000000000246 R12: 000000000000000b
[  892.458057][T23951] R13: 0000000000000a34 R14: 00000000004cc994 R15: 0000000000000002
04:16:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b69, &(0x7f0000000200))

04:16:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x1c, 0x80000)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x9e0000, 0x1, 0x1ff, r2, 0x0, &(0x7f0000000100)={0x980907, 0x7, [], @value64=0x1f}})
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:07 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b32, &(0x7f0000000000)=""/80)

04:16:07 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2754, &(0x7f0000000200))

04:16:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6a, &(0x7f0000000200))

04:16:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b33, &(0x7f0000000000)=""/80)

04:16:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2854, &(0x7f0000000200))

04:16:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x13)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000200))

04:16:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b34, &(0x7f0000000000)=""/80)

04:16:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2954, &(0x7f0000000200))

[  893.315096][   T26] audit: type=1804 audit(1582431368.288:381): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/908/bus" dev="sda1" ino=16596 res=1
04:16:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6c, &(0x7f0000000200))

[  893.366223][T24096] xt_CT: You must specify a L4 protocol and not use inversions on it
[  893.447333][   T26] audit: type=1804 audit(1582431368.318:382): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/908/bus" dev="sda1" ino=16596 res=1
04:16:08 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000002, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b35, &(0x7f0000000000)=""/80)

04:16:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x9, &(0x7f0000000000)=[{0x5, 0x4, 0x8, 0x6}, {0x9, 0x5, 0x0, 0x9}, {0xffff, 0x7, 0x4}, {0x0, 0x2, 0x64, 0x80000001}, {0x2, 0x5, 0x4, 0x424}, {0x1, 0x5, 0x7f, 0x9}, {0x6, 0x9, 0x7f, 0x2}, {0x3, 0x6, 0x7f, 0x144}, {0x800, 0x1, 0x27, 0xfffffffe}]})
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6d, &(0x7f0000000200))

04:16:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2f4b, &(0x7f0000000200))

[  893.800381][   T26] audit: type=1804 audit(1582431368.778:383): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/909/bus" dev="sda1" ino=16833 res=1
04:16:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b36, &(0x7f0000000000)=""/80)

04:16:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b70, &(0x7f0000000200))

04:16:09 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000003, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:09 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x304b, &(0x7f0000000200))

04:16:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='proc%GPL:.em1\'\x00')

04:16:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b37, &(0x7f0000000000)=""/80)

04:16:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b71, &(0x7f0000000200))

04:16:09 executing program 1:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
r0 = socket$netlink(0x10, 0x3, 0x15)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x9)
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x228200, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f00000000c0)="d0c5bbc3dd19b53503423ce0892cfc86debec6925926088eb7f486b398ed2c162e3ce7c85ef9d67dbfc09fd0ab325a904a1f3c50cc1879bc94645df4f2ad7384ca5d971f38df0eb0fca1a93c7ea06a60684af3eb92fa10b16ddd2d9fab762b8866fa64735f5c1f9036204f06f86ffeffa26ebb6e2bf1cdbbb57bdaf65ad6410891f17cc32535014de124dc5b3597a4a336124dcf9df5983f81d5e0115bb1063651f228f22c7d1bb2bcd6ad49afcea83579457967b24d1fdf5cf2aeee8d61be14518981449e85310f2a3d6cd3e160c04292b40a5c14dfde031e", 0xd9)

[  894.299606][   T26] audit: type=1804 audit(1582431369.278:384): pid=24349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/910/bus" dev="sda1" ino=16977 res=1
04:16:09 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x314b, &(0x7f0000000200))

04:16:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b3a, &(0x7f0000000000)=""/80)

04:16:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b72, &(0x7f0000000200))

04:16:09 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000004, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:09 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x324b, &(0x7f0000000200))

04:16:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x10000)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4bfa, &(0x7f0000000200))

04:16:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b3b, &(0x7f0000000000)=""/80)

04:16:09 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x334b, &(0x7f0000000200))

04:16:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='cpuset\x00')
getsockname$ax25(r2, &(0x7f0000000740)={{}, [@bcast, @rose, @remote, @default, @bcast, @default, @remote, @rose]}, &(0x7f00000007c0)=0x48)

04:16:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b3c, &(0x7f0000000000)=""/80)

04:16:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4bfb, &(0x7f0000000200))

04:16:10 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000005, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:10 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x3389, &(0x7f0000000200))

04:16:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b3d, &(0x7f0000000000)=""/80)

04:16:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c00, &(0x7f0000000200))

04:16:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={<r2=>0x0, 0x4, 0x3, 0x2, 0xfff, 0x1f}, &(0x7f0000000340)=0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x9765, 0x201, 0x2, 0x9, r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00')
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000e70", @ANYRESHEX, @ANYBLOB="010b808fb09fe17ffe7ab30f6c2822f6adff7454a46da07f8667a400f6c63c737fec0960e8d68335a4a29a0b591c8936ab4b35019eaf4732396d719bc6897fe259b41bdd8c0e712148c5f7ed46637b530231fc0dcc038b1a47b2177fa1cb57794339b37547c59c3f26b80bfc12a672ac8ad3bf6530e9dc362d4a9458d0b88a27b335f8379d02d8bd7faa8462c3ca88d34f9c9b24724d3417fbba5118ff20c56b68b398a84bf2805b846885bfaa977247a45c4346b2671b7e3b746d271db608b78360b9c43399d4e0f74d258b51a2ee3e6ad5cb00"/222], 0x3}}, 0x2000880d)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x400, 0x70bd28, 0x2, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40045)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsu\x00', 0x4128c0, 0x0)
sendmsg$rds(r7, &(0x7f0000000580)={&(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000740)=""/230, 0xe6}], 0x3, 0x0, 0x0, 0x20000000}, 0x40010)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r8 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r8)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vcsa\x00', 0x4000, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e20, 0x2f3, @dev={0xfe, 0x80, [], 0x12}, 0xfffeffff}}, 0x3, 0xd1a}, &(0x7f0000000940)=0x90)
ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f0000000000)={0x8, 0x7, 0x5, 0xff, 0xffffffe1, 0x1ffe0})

04:16:10 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x344b, &(0x7f0000000200))

04:16:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c01, &(0x7f0000000200))

04:16:10 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000006, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b40, &(0x7f0000000000)=""/80)

04:16:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1)
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r5 = dup(r4)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="83000000090000000010000054f3c4b48cf0c648914a7ef5202d250ff51d8cb6d224d6097e9716907c7d4b403de9c808ad610064952ec4456a840f01d11c5a89972135c9589a38dc20c44f2eb763d9772abff8a6b41d1bea723ec73d1a3d8f81f5a810e5c7ec88a616fb9bb44f1f9b70f2cb652aad6da9bb36d50a2833dea53ee63c3bdda9c439908d2234c527d18c"])
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x9, 0x0, 0x4, 0x20000, 0x8, {r2, r3/1000+10000}, {0x1, 0x0, 0x6, 0x1, 0xa4, 0x5, "81568bb2"}, 0x6, 0x0, @userptr=0x4, 0x4aea})
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0)
connect$netlink(r6, &(0x7f0000000440)=@unspec, 0xc)

04:16:10 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x354b, &(0x7f0000000200))

04:16:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c04, &(0x7f0000000200))

04:16:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b41, &(0x7f0000000000)=""/80)

[  895.846998][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  895.847012][   T26] audit: type=1804 audit(1582431370.828:390): pid=24725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/913/bus" dev="sda1" ino=17041 res=1
[  895.958097][   T26] audit: type=1804 audit(1582431370.858:391): pid=24725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/913/bus" dev="sda1" ino=17041 res=1
04:16:11 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000007, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x80)

04:16:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b44, &(0x7f0000000000)=""/80)

04:16:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c05, &(0x7f0000000200))

04:16:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x364b, &(0x7f0000000200))

[  896.298255][   T26] audit: type=1804 audit(1582431371.278:392): pid=24847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/914/bus" dev="sda1" ino=16946 res=1
04:16:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5409, &(0x7f0000000200))

04:16:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = dup(r1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x14, &(0x7f00000000c0)={r5}, 0x8)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x4424c0, 0x0)
r7 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x14, &(0x7f00000000c0)={r10}, 0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000200)={<r11=>r10, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}}}, [0x2, 0x6, 0x9, 0x9, 0x1, 0x2, 0x4, 0x80, 0x9, 0x8, 0x100, 0x81, 0x7f, 0x2, 0x5]}, &(0x7f0000000140)=0x100)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000180)={0x81, 0x8, 0x204, 0x0, 0x40, 0x7, 0x401, 0x4, r11}, 0x20)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x8}, 0x8)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r12 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r12, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  896.393103][   T26] audit: type=1804 audit(1582431371.308:393): pid=24847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/914/bus" dev="sda1" ino=16946 res=1
04:16:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b45, &(0x7f0000000000)=""/80)

04:16:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x374b, &(0x7f0000000200))

04:16:11 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000008, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540b, &(0x7f0000000200))

04:16:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x3754, &(0x7f0000000200))

04:16:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b46, &(0x7f0000000000)=""/80)

[  896.807736][   T26] audit: type=1804 audit(1582431371.788:394): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/915/bus" dev="sda1" ino=16914 res=1
04:16:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x3a4b, &(0x7f0000000200))

04:16:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$capi20(r4, &(0x7f0000000000)={0x10, 0x2, 0x8, 0x82, 0x2d5, 0x2}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  896.913399][   T26] audit: type=1804 audit(1582431371.818:395): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/915/bus" dev="sda1" ino=16914 res=1
04:16:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540c, &(0x7f0000000200))

04:16:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b47, &(0x7f0000000000)=""/80)

04:16:12 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000010, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:12 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r0, 0x1, &(0x7f0000000200)="05febf295e0bcfd4a58bba8f0ac1691f765ce6b4142f1303a5e847a0710000009931f29e1395d51b91d95ec0667abc07b7cb239e666f90ab159912d00d7c8e1abed871")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x14, &(0x7f00000000c0)={r5}, 0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e24}}}, 0x84)

04:16:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540d, &(0x7f0000000200))

04:16:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x3b4b, &(0x7f0000000200))

[  897.244003][   T26] audit: type=1804 audit(1582431372.218:396): pid=25194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/916/bus" dev="sda1" ino=16657 res=1
04:16:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b48, &(0x7f0000000000)=""/80)

04:16:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540e, &(0x7f0000000200))

04:16:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x3c4b, &(0x7f0000000200))

04:16:12 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000011, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b49, &(0x7f0000000000)=""/80)

04:16:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xee}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800)
socket$inet_tcp(0x2, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4], 0x1}}, 0x80)

04:16:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540f, &(0x7f0000000200))

04:16:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x3d4b, &(0x7f0000000200))

[  897.762439][   T26] audit: type=1804 audit(1582431372.738:397): pid=25418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/917/bus" dev="sda1" ino=17217 res=1
04:16:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f0000000000)=""/80)

[  897.857110][   T26] audit: type=1804 audit(1582431372.778:398): pid=25418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/917/bus" dev="sda1" ino=17217 res=1
04:16:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5410, &(0x7f0000000200))

04:16:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000140))
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRES64=r3, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYPTR, @ANYRESDEC, @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES64=r6, @ANYRES32=r1, @ANYRES16, @ANYRESOCT=0x0], @ANYRESHEX, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="847d1da4e014d527c63f1a7b7a8ae59977cae5f8d25fc4ac092a8ea0f3fcc2b3698d33d9f3cdcb0cf260ac6544716844b1a6a4d872b3355d1b2edae27a76d145fd34e3a744a42a4f001b630d1eb87668eaccc0ef2c", @ANYRES32, @ANYPTR64, @ANYRESDEC, @ANYRES16, @ANYPTR], @ANYRESOCT, @ANYRESHEX=0x0]], 0x1}}, 0x4000894)

04:16:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x404b, &(0x7f0000000200))

04:16:13 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000048, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4c, &(0x7f0000000000)=""/80)

04:16:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5412, &(0x7f0000000200))

04:16:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x414b, &(0x7f0000000200))

[  898.260053][   T26] audit: type=1804 audit(1582431373.238:399): pid=25542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/918/bus" dev="sda1" ino=16914 res=1
04:16:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4d, &(0x7f0000000000)=""/80)

04:16:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4154, &(0x7f0000000200))

04:16:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5413, &(0x7f0000000200))

04:16:13 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000004c, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x157c, 0x14, 0x8, 0x70bd28, 0x25dfdbfb, {0x5, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "504aadc6f2e167f501edc4a7be1ed2b0c6e5ba663e265fbc0d847667034a1c4579ef6aa7db22fd890c42eb50a7fd94409d4b45e75a526d9aced1b63b3d7232be96171270d7cd4e3bee3cc71f60512baeceb84f25d9fb2e19e10bcc39a446268f77aa1cb4758333aa180330ebdf44df16c39e3fd42096c5ad570fb31557acebac6f8acc3f04c8d2"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "4915debc2c889d20715887220c33c3cc49b1546eda488d176c4e0a32d5762eef26748ceccc9d37d5dfac5cc9c336a52da3ad0f6dc50e4b60c98d4f4bbd3507326957e5602e57357eb404405c499858a5d10cc6bf886791fbb0acee9fa264727a39b878d2a30c7a1d197c1baad0bb20ca2b5c173e5b7e910743b351ac815465af8b928b3dc6f84214a252c7d6bbd8f9a0c2c5d756123a3fe45bca40d1e3ac3ca61ec696cf5e88e272c01acfe8d0eff47b369d883c60feae748e2c60679adda89cead7772fff5cc3167ca6c0ee2499e24d3a33a524a0fd4c5abda373bd0c5bcd5408544447ee1306803572603c"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "84296090bf407d038d25f9e86fc125ee35f590023feff19a00e965d1fb377b8a90de086f011918c6fd191f43761b6709f89bf53a6abb3c25dd6bd77c5c199b6bfea7363b811c12fd319773059b922ff4905ba252b5df7eb8ff08a7b676db0fef6989af60bfd4ec267bb3c25264d3a7c1d17a1f6fc236794ae81f3f57e117f1e97a8423f65039429409e3016cbcd2477d16f1339bc55113396c4fe95f810f8fcfce9a160de3e7cfff5f0c07109895397d375fc97d9d83ce08b496fbf7283a975fe903081218b4f0bc39c543fa0a465b059fe108e3b105cfb1d214c01b7f87bf7aba178cd2e4493c6294f228b6d4a95395bc9e7a4721a6"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "75cc78532bbf200ec8bd5f254920148c753aa9bef42759339db98cade9f436c7ef039b739e10e8126587411327fab81c2790079b6b404bfb0f243e9da00ad973e2c5580e6fc09d13eb835778d444b7b8e311d06f2e123d6428d116f344389c2ba6b12dfb461a61657eb87bab76375e1ab56f34332caf2d559b2e82c1598f767637d3588610"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "0ba2c7e1d6360539492abc8b8571db5974b6b605da392949366aa18f9937b8f5a0185ad001a66f68b18e403d23bbd9bc8925ad94d0077c9751fd546a555b6bb33517a33cf97ca1"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "0adefc231bc20d04f564edd4e257d4029c2eb57c59431b10ab4ec9a47958121d1dc1b9224b763cf4bbaf4db6e74ee72368c056a6854015c36fa1447e0bf70e08bbfafd6bf7815e69d75fd91979a8bb3685b88f2b45a0a4aa81ee8a8191b12494706375a643594cb9e78640e67542ec6edb73ed6d48ec849b06ec1a32d277168297d7640e28c5ddfa13120754988ea3fda5a6d5a4193d210cedcb9f63f1d71ca0546f527b94dc08595130f9c512341f2f6fb3f580db79d2ed919edd502206f6373b85f4247679433defd17137f161f70da183d88b0c29bb"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "0cf34578b670f5a8bf1046dcb55ed23b3ea0fcf7a7ff383de7fff9a3ae3e69cb1dc42c8bd5b69c5457fa1d106e8be56b604acd114d7305061d2fc9d73ce203c615f39a54af6722cc42a29d1f3a1e983e8f65f604ecc1192e5286d589f52c8515b0cc84a636c80b3c80373efd06012d82140926bdabb737303a7b68af326578fb828c6c3b556a624005bb2432406945981d83"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "6c1020633a1bfc84f0890d14f5538dc3e872fa687e4045f1f285de3ff6fdae2e3c525234bcd0fb7cf1c140b63154bf984f04100f883e3e73dae9822895837a754df830e958cc65055d302e53ad51968ab4ecb5b2e9ac4c10bf19e2ba92fec8692e32264ec0409f4a2ec620deb7771dc3a95562519a6465f3f37171fdf361e72c06dac5b510e98b8168933b2b7a6959c7b45e36ccfb354e26"}]}, 0x157c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041)
socket$inet_tcp(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x4)

04:16:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4e, &(0x7f0000000000)=""/80)

04:16:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x444b, &(0x7f0000000200))

04:16:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5414, &(0x7f0000000200))

04:16:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26)
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x888c0, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:16:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5415, &(0x7f0000000200))

04:16:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b52, &(0x7f0000000000)=""/80)

04:16:14 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000060, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x454b, &(0x7f0000000200))

04:16:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
recvfrom$x25(r2, &(0x7f0000000740)=""/4096, 0x1000, 0x1, &(0x7f0000000000)={0x9, @null='               \x00'}, 0x12)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:16:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b60, &(0x7f0000000000)=""/80)

04:16:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5416, &(0x7f0000000200))

04:16:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x464b, &(0x7f0000000200))

04:16:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5418, &(0x7f0000000200))

04:16:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b61, &(0x7f0000000000)=""/80)

04:16:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x980000, 0x0, 0x2, <r2=>r1, 0x0, &(0x7f0000000040)={0x990a2c, 0x1, [], @p_u16=&(0x7f0000000000)=0x1b}})
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[]}}, 0x0)

04:16:14 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000068, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x474b, &(0x7f0000000200))

04:16:15 executing program 1:
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f650008e8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc300000000e7a1cf1fe929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d000000001a0000000c243d8b3d6968a84fc9132f46fac216c65da574f12efc33194f7f8b440400000000000000b4f2d4ab4ecefdc321389ee63785fb3b29d80c6a07b927cda7aec2b95cc6ce82472f5e6bf386549bbc4bd28dd90687aca5afbccb4ea391599eea13b9afdbbe9050785460fab81d86be7a33d21d4e76a4e0e337e242b1f9c772f0d8f3163218208984cd39b9b4694f2e5f54ddf25de116ec0e855b564c0dda9247e46d72dbba16f4bdb81fbaa182b82b84adc7b95fc052efcdb3f2d77c608353ec225ce7f8ae4d24b89bf2cd84891c7716efce95239bcb3cc30b701c"], 0x1}, 0x1, 0x0, 0x0, 0x4008884}, 0x80)

04:16:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b62, &(0x7f0000000000)=""/80)

04:16:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541b, &(0x7f0000000200))

04:16:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x484b, &(0x7f0000000200))

04:16:15 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000006c, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/344], 0x48}}, 0x80)

04:16:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b63, &(0x7f0000000000)=""/80)

04:16:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x494b, &(0x7f0000000200))

04:16:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541c, &(0x7f0000000200))

04:16:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7, 0x5147f03a2a044df9)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x0, 0xff, 0x8, 0x3}, {0x3, 0x7, 0xee, 0x2}, {0x3, 0x7f, 0x80, 0x3}, {0x800, 0x1, 0x3, 0x2}]})
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "31285167c92db9b6", "e6a8c18d7ad919e8e5fcc247ded4a481", "92edf49d", "99dbad8a50a4a50e"}, 0x28)
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:16:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b64, &(0x7f0000000000)=""/80)

04:16:15 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000074, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541d, &(0x7f0000000200))

04:16:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4a4b, &(0x7f0000000200))

04:16:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b65, &(0x7f0000000000)=""/80)

[  900.993893][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  900.993908][   T26] audit: type=1804 audit(1582431375.968:407): pid=26364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/923/bus" dev="sda1" ino=17409 res=1
04:16:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541e, &(0x7f0000000200))

04:16:16 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b2f, &(0x7f0000000200))

[  901.123925][T26385] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
[  901.170938][   T26] audit: type=1804 audit(1582431376.018:408): pid=26364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/923/bus" dev="sda1" ino=17409 res=1
04:16:16 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000007a, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541e, &(0x7f0000000200))

04:16:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=<r3=>0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x1, 0x2, 0x4, r3}}, 0x1e)
socket$inet_tcp(0x2, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r6)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x1}})
sendmsg$nl_generic(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:16:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b66, &(0x7f0000000000)=""/80)

04:16:16 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b30, &(0x7f0000000200))

[  901.510613][   T26] audit: type=1804 audit(1582431376.488:409): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/924/bus" dev="sda1" ino=17313 res=1
04:16:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5421, &(0x7f0000000200))

[  901.624344][   T26] audit: type=1804 audit(1582431376.538:410): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/924/bus" dev="sda1" ino=17313 res=1
04:16:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b67, &(0x7f0000000000)=""/80)

04:16:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfff, 0x2, 0x4}})

04:16:16 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b31, &(0x7f0000000200))

04:16:16 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000086, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b68, &(0x7f0000000000)=""/80)

04:16:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5422, &(0x7f0000000200))

04:16:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0xe)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
tee(r2, r3, 0x1f, 0xa)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

04:16:17 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b32, &(0x7f0000000200))

[  902.110458][   T26] audit: type=1804 audit(1582431377.088:411): pid=26613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/925/bus" dev="sda1" ino=17362 res=1
04:16:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5423, &(0x7f0000000200))

04:16:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b69, &(0x7f0000000000)=""/80)

04:16:17 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000088, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x9)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:17 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b33, &(0x7f0000000200))

04:16:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5424, &(0x7f0000000200))

[  902.596339][   T26] audit: type=1804 audit(1582431377.578:412): pid=26735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/926/bus" dev="sda1" ino=17473 res=1
04:16:17 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2)
write$capi20_data(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/264], 0x108)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000140)="91daf812a5da2aa6976a0ca64ce38062da0c241050851fd9f214417e1a56a215ff958465fce690a719aec1fcd97900d1e3163b9a5cd2b93b8edd7f6d8abcf1e8a29518cf21c789486c26b52d8f92405cc91abeb3d7cd2812ae1bd1bc7f6a9b16d9424f0c570aabe5", 0x68, <r3=>0x0})
r4 = open(&(0x7f0000000380)='./file0\x00', 0x204100, 0x0)
fchdir(r4)
io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000001240)="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", 0x106b, <r5=>r3})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="4dbfa8def37a342807399a637c9646dfe5d4ae128485e11a7be9c8e9ca9d9cbb3b0a3ce83f26f310d486b064c4138de0985891f92f7abadbf4913da14ef520744811c8d0e7", 0x45, r5})
lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@ng={0x4, 0x6, "1e88f34b"}, 0x6, 0x2)
prctl$PR_GET_KEEPCAPS(0x7)

04:16:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b6a, &(0x7f0000000000)=""/80)

04:16:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  902.716061][   T26] audit: type=1804 audit(1582431377.578:413): pid=26735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/926/bus" dev="sda1" ino=17473 res=1
04:16:17 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b34, &(0x7f0000000200))

04:16:17 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000000b4, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5425, &(0x7f0000000200))

04:16:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b6b, &(0x7f0000000000)=""/80)

04:16:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b35, &(0x7f0000000200))

04:16:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200080, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0xa24, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44001)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5427, &(0x7f0000000200))

[  903.264439][   T26] audit: type=1804 audit(1582431378.238:414): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/927/bus" dev="sda1" ino=16914 res=1
04:16:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b6c, &(0x7f0000000000)=""/80)

[  903.383097][   T26] audit: type=1804 audit(1582431378.238:415): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/927/bus" dev="sda1" ino=16914 res=1
04:16:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b36, &(0x7f0000000200))

04:16:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
keyctl$set_reqkey_keyring(0xe, 0x7)
socket$inet_tcp(0x2, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/344], 0x48}}, 0x80)

04:16:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5428, &(0x7f0000000200))

04:16:18 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000160, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b6d, &(0x7f0000000000)=""/80)

04:16:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b37, &(0x7f0000000200))

04:16:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5429, &(0x7f0000000200))

[  903.773641][   T26] audit: type=1804 audit(1582431378.748:416): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/928/bus" dev="sda1" ino=16914 res=1
04:16:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b70, &(0x7f0000000000)=""/80)

04:16:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3a, &(0x7f0000000200))

04:16:19 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000178, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5437, &(0x7f0000000200))

04:16:19 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1000, 0x81, 0x0, 0x4, 0xb, "ee8c846fb2e077706d6b1e34d5dbe0afabfd5f"})
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f0000000340)='./file0\x00', 0x2d600, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000240)={<r5=>0x0})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4008641c, &(0x7f0000002c00)={r5, &(0x7f0000001c00)=""/4096})
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r7=>0x0, <r8=>0x0})
ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000002c0)={0x7, 0xc, 0x4, 0x100000, 0x80, {r7, r8/1000+30000}, {0x2, 0xc, 0x1, 0xb7, 0xfe, 0x25, "d3f9c462"}, 0x1f, 0x4, @userptr=0x20, 0x1000, 0x0, r0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={r5})
r9 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r9, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000000380)={0x60, "fa7b89073bd1330a360f77c6790092a77b22ef7848e4860765a8fe95ebc70f583eac7a6b2fd9c7d940a3393a41161d1f72ec6ea7cf007921c079d207b1795173cf4509d1480fec6400a48676e780311033cd1bc13c56a427dda50d0c87e0d0a6ce1d85b20566492026f127e0bdd6ae061c00b224ffdcbf75633904a063884473"})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={r5, &(0x7f00000000c0)=""/82})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200))

04:16:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x8)
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b71, &(0x7f0000000000)=""/80)

04:16:19 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3b, &(0x7f0000000200))

[  904.323067][T27124] Unknown ioctl -1072667619
04:16:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5441, &(0x7f0000000200))

04:16:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x5, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000140)={0x3, 0x7, 0x0, 0x3, 0x9, 0x24, 0x28, "f8f22fe15738adaf10e7319503156167b712771c", "4b01184c050f612f4a1920c11966866b9558f21a"})
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b72, &(0x7f0000000000)=""/80)

04:16:19 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000001a0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:19 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3c, &(0x7f0000000200))

04:16:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5450, &(0x7f0000000200))

04:16:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/80)

04:16:19 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b3d, &(0x7f0000000200))

[  905.032906][T27462] Unknown ioctl -1072667619
04:16:20 executing program 3:
r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd)
keyctl$clear(0x7, r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:20 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x2b)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000040)={{{0xf}}, 0x54, 0x2db, &(0x7f00000000c0)="51b8c1b2dfec2e59938cd10a8f37270305073a0b626af0407e659d933d3932fc523e2e47cf94833afdc7c80d382dff4b69c41d7b732db21ea18ff0f213fc9dbd7b501706b42de5dff625bd4c36fd7df87fab30b4"})
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:20 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000001da, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5451, &(0x7f0000000200))

04:16:20 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000200))

04:16:20 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000000)=""/80)

04:16:20 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
epoll_create(0x3ff)
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:20 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b41, &(0x7f0000000200))

04:16:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200))

04:16:20 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4c00, &(0x7f0000000000)=""/80)

04:16:20 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000001e8, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:20 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x7fff, 0x3, 0x6, 0x9, 0x5, 0x8, 0x6, 0x7fff, 0xffffffff, 0x3, 0xfff, 0x1ff, 0x20, 0x0, 0x7, 0x8], 0x5000, 0x10c00})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="dc788d6c9454b4f4b5772a96e05a5e84e42d71c630c195ae4f500c40398b4a904a100367eab971498ee82fe5c64717d93ab83f2a65845eb8d9cafe849287d71e840771c334b59d2c2ef8f31d1c71ae39392294253f93c92b968ebeef0436c594082f6e8aa7415348e8959ef3d5bdeb9275", 0x71, 0x7}, {&(0x7f0000000140)="0d29f46118e220adbb1f4a072809d73921a8cde944199e0f6b2aaaeb45912784086d86ce95d9b5045d7396f348fcb0bbb58d8a8f42b4bf9a98c2a5ebff2ae6057bd47cc9c20d0408ac8dd2670948e52de014585f91407b", 0x57, 0x2}, {&(0x7f0000000200)="74711940d7d017e94b74f7cd9e8ba18274f1abf876074b7fba34826913bfb4abbb8440cac6432dcd392d8201fd4221cf0e24f857d5113f340ce28281844889873710cdfe61b7f399611d5aa98daaf2ece52fa6417fee987139faa03242996b001ad901a05f4c9aeaac63db53054539c6", 0x70, 0x80}], 0x102060, &(0x7f0000000300)='L\x00')
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x14000, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r3, 0x1, 0x0, 0xde68, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x20)

04:16:20 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x301000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0xf3, 0x0, 0xffff8000, "586553ca124e3d3e7759a5430247172b25e434d85d6548d1978e4cae0e5389fd9974b0c249c78b5ef8e9863ef60465145a70fbecb2162477519ee59ec466455f7653f4271b760f123061687bea1932852b0a3410adaeff38607148130d24002366343f1ca55f09b1a466b07178a1fbbf9fa44425c5e45b95bad44d0bcd550cb17a5c8c00efd050bc28ed701a6ee8292cd89a8bbdba8a77d2438bed3564deed684e11543c2e76f7317ebafa575b44f4e731442ce349146e0b24f60492964914762e483be2b279e8c4e529f4884dd5c7e3090cd34a4d635c41344f306e4d859418f306b7e1568a2e39fad06df1fcbd5b0eaca3eb"})

04:16:20 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b44, &(0x7f0000000200))

04:16:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x545d, &(0x7f0000000200))

04:16:20 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4c01, &(0x7f0000000000)=""/80)

04:16:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5460, &(0x7f0000000200))

04:16:20 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b45, &(0x7f0000000200))

04:16:20 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r3=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000700)={{{@in=@rand_addr=0x5, @in6=@mcast2, 0x4e24, 0xffff, 0x4e23, 0xa00, 0xa, 0x10, 0x20, 0x2b, r3, r4}, {0xb9, 0x200, 0x1, 0xff, 0x5, 0x10000, 0xa6c3}, {0x140, 0x9, 0x3, 0x3ff}, 0x7fffffff, 0x6e6bba, 0x0, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@broadcast, 0x3503, 0x3, 0x1, 0x9f, 0x3, 0x401, 0x50}}, 0xe8)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[]}}, 0x80)

04:16:21 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5386, &(0x7f0000000000)=""/80)

04:16:21 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5600, &(0x7f0000000200))

04:16:21 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x540b, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040))
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)

04:16:21 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000260, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:21 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b46, &(0x7f0000000200))

04:16:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008911, &(0x7f0000000000)="ef0cb5055e1b1be847a07181a035b05088a7878854395e00de0ec81576cffcc70fcbb46136e0e0ce66201959799249b990e10b7c0b75de4f7b41a3a29d41282890bebc66e6a5ae6078801c9209")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000080)
r2 = socket$netlink(0x10, 0x3, 0x4)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x8000, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:21 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5601, &(0x7f0000000200))

04:16:21 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5409, &(0x7f0000000000)=""/80)

04:16:21 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b47, &(0x7f0000000200))

04:16:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESOCT], 0x1}, 0x1, 0x0, 0x0, 0x8040}, 0x80)

04:16:21 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x540b, &(0x7f0000000000)=""/80)

04:16:21 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000270, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  906.464891][   T26] kauditd_printk_skb: 4 callbacks suppressed
04:16:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  906.464906][   T26] audit: type=1804 audit(1582431381.438:421): pid=27740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/933/bus" dev="sda1" ino=17313 res=1
04:16:21 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

[  906.488322][   T26] audit: type=1804 audit(1582431381.468:422): pid=27740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/933/bus" dev="sda1" ino=17313 res=1
[  906.996944][   T26] audit: type=1804 audit(1582431381.978:423): pid=27866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/934/bus" dev="sda1" ino=17867 res=1
[  907.019435][   T26] audit: type=1804 audit(1582431381.998:424): pid=27866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/934/bus" dev="sda1" ino=17867 res=1
04:16:22 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:22 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x540c, &(0x7f0000000000)=""/80)

04:16:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5602, &(0x7f0000000200))

04:16:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>r2})
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x2}, 0x1, 0x0, 0x0, 0xc00}, 0x80)

04:16:22 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000002cc, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:22 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000200))

04:16:22 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x540d, &(0x7f0000000000)=""/80)

04:16:22 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4a, &(0x7f0000000200))

04:16:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5603, &(0x7f0000000200))

04:16:22 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x540e, &(0x7f0000000000)=""/80)

04:16:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00')
r8 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x1c, r7, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@dev, @local, <r10=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20028041}, 0x40010)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r11, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r11, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x21, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)

[  907.416999][   T26] audit: type=1804 audit(1582431382.398:425): pid=27990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/935/bus" dev="sda1" ino=17867 res=1
[  907.423330][   T26] audit: type=1804 audit(1582431382.398:426): pid=27990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/935/bus" dev="sda1" ino=17867 res=1
04:16:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5605, &(0x7f0000000200))

04:16:22 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:22 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000300, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:22 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4c, &(0x7f0000000200))

04:16:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xb4, [], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/180}, &(0x7f0000000180)=0x78)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5606, &(0x7f0000000200))

04:16:22 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x540f, &(0x7f0000000000)=""/80)

04:16:23 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4d, &(0x7f0000000200))

[  908.118160][   T26] audit: type=1804 audit(1582431383.098:427): pid=28123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/936/bus" dev="sda1" ino=17887 res=1
04:16:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5607, &(0x7f0000000200))

04:16:23 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5410, &(0x7f0000000000)=""/80)

04:16:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000003c0)={0x508000, 0x2, 0x0, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9c0903, 0x6, [], @p_u16=&(0x7f0000000140)=0x3}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x14, &(0x7f00000000c0)={r5}, 0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400)={r5, 0x3}, 0x8)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aae9fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefd29c3d3c3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3073950f22579b04079a710ab9f1ee3d86a3e3de3813ee98a91f6a6d777d70d27962d8b075bafb5e29ce4e51a83cba1c4ed406b2f003db1d2b0caf19e059e8f513190256ce33b63a5124259f5d2b6234e4fd81f365dabdbfc2b27e09b8d486879f8614e8e93e644ad2d588f036ce090e0cf860e0299f2e4243f1e48503b0ac99c51b2b62828694ee39a4f24e67cfa07f44620927a7d0af2ff494e84d854fa70132160170e64dbefdb1e085c93fcc8fdd5a2ac7f803a7a51ff5b86a4d8faadd26378b0b61f17ea0dcbe36b7ae26b"], 0x1}}, 0x81)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x20, r8, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="008ae9c685be992e320acab7ced8be", @ANYRES16=r8, @ANYBLOB="08002dbd7000fedbdf250a000000c000058014000280080003007701000008000200010000004c0002800800010013000000080001000600000008000300090000000800020031dc000008000100140000000800020005000000080002000600000008000400ff000000080004008900000008000100657468005400028008000100110000000800020009000000080002000500000008000100080000000800010008000000080002000800000008000200010000000800010005000000080001000a000000080004002000000028000280140003800800010009000000080002000000000008000100000098600800020002000000"], 0xfc}}, 0x48001)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getpeername$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14)

[  908.270757][   T26] audit: type=1804 audit(1582431383.098:428): pid=28123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/936/bus" dev="sda1" ino=17887 res=1
04:16:23 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4e, &(0x7f0000000200))

04:16:23 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000340, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:23 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000080)={0x80000001, 0x8, 0xffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
fcntl$getflags(r0, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x402003)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="9bf4")

04:16:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5608, &(0x7f0000000200))

04:16:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9d0000, 0x0, 0x100, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0906, 0x7ff, [], @string=&(0x7f0000000000)=0x3}})
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100))
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:23 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f0000000000)=""/80)

04:16:23 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b52, &(0x7f0000000200))

[  908.708627][   T26] audit: type=1804 audit(1582431383.688:429): pid=28250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/937/bus" dev="sda1" ino=17882 res=1
04:16:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5609, &(0x7f0000000200))

04:16:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x80)

[  908.808064][   T26] audit: type=1804 audit(1582431383.688:430): pid=28250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/937/bus" dev="sda1" ino=17882 res=1
04:16:23 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5413, &(0x7f0000000000)=""/80)

04:16:24 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000356, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:24 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b60, &(0x7f0000000200))

04:16:24 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560a, &(0x7f0000000200))

04:16:24 executing program 3:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0)
fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x372, 0x16b10280}]}, 0xc, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40084)

04:16:24 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5414, &(0x7f0000000000)=""/80)

04:16:24 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560b, &(0x7f0000000200))

04:16:24 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200))

04:16:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$VT_RELDISP(r1, 0x5605)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "45daa05bb19020bd36dfb8a24905ce9d"}, 0x11, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x100, 0x0)
linkat(r3, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000400)='./file0\x00', 0x0)
r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r5)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6)
r7 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)
r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x82, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x20000001)

04:16:24 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5415, &(0x7f0000000000)=""/80)

04:16:24 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560c, &(0x7f0000000200))

04:16:24 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000366, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:24 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b62, &(0x7f0000000200))

04:16:24 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5416, &(0x7f0000000000)=""/80)

04:16:24 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560d, &(0x7f0000000200))

04:16:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r1, 0xcddd5000)
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:16:24 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b63, &(0x7f0000000200))

04:16:25 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000003d0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:25 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5418, &(0x7f0000000000)=""/80)

04:16:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$RTC_PLL_GET(r5, 0x80207011, &(0x7f00000000c0))
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r6, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/188, &(0x7f0000000000)=0xbc)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:25 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560e, &(0x7f0000000200))

04:16:25 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b64, &(0x7f0000000200))

04:16:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[]}}, 0x80)

04:16:25 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x541b, &(0x7f0000000000)=""/80)

04:16:25 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000003e0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:25 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b65, &(0x7f0000000200))

04:16:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getpeername$netrom(r1, &(0x7f0000000280)={{}, [@default, @netrom, @remote, @bcast, @null, @null, @remote, @bcast]}, &(0x7f0000000140)=0x5c)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)

04:16:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = fsopen(&(0x7f0000000100)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200080, 0x0)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000040))

04:16:25 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x541c, &(0x7f0000000000)=""/80)

04:16:25 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b66, &(0x7f0000000200))

04:16:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x1)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080))
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$AUDIT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3e}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x933, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c060}, 0x2004c800)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f00000002c0)=0x52d)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800008, 0x10010, r2, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x1, 0xffffffff}, 0xb)

04:16:25 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x541d, &(0x7f0000000000)=""/80)

[  910.846698][T28840] virtio-fs: tag <(null)> not found
04:16:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560f, &(0x7f0000000200))

04:16:26 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000003fa, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000040), 0x800)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:26 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b67, &(0x7f0000000200))

04:16:26 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x541e, &(0x7f0000000000)=""/80)

[  911.080544][T28840] virtio-fs: tag <(null)> not found
04:16:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x80)

04:16:26 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000606050000000000000000000cdb7c927308919f1f797a76dad33100005300"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:26 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b68, &(0x7f0000000200))

04:16:26 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x541e, &(0x7f0000000000)=""/80)

04:16:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6364, &(0x7f0000000200))

04:16:26 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000003fc, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x5)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x200, 0x10001)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={@any, 0x9, 0xc43, 0x45, 0x7, 0x4, "1429f9635445bef147555af9e4cea96243b7ef7e5b752cea4b945e8e1f2e204419556ad282a89261ba4244f0fe6024f0267db7d77f845349f62bb8784f4c069268a2c5364ac84fa269b3e24d0b7404478f99703874a6bb323af319d5ea1c1b1e42a70c4b91be08a16c0a5f4374abfab65b65273c01c045db9148b7b7a36451f9"})
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64=r3, @ANYPTR64, @ANYRES64=0x0]], 0x1}}, 0x80)
getrlimit(0x2, &(0x7f0000000180))

04:16:26 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b69, &(0x7f0000000200))

04:16:26 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5421, &(0x7f0000000000)=""/80)

04:16:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8912, &(0x7f0000000200))

[  911.780499][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  911.780516][   T26] audit: type=1804 audit(1582431386.758:439): pid=29117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/943/bus" dev="sda1" ino=16802 res=1
04:16:26 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r1 = dup2(r0, 0xffffffffffffffff)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

04:16:26 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6a, &(0x7f0000000200))

04:16:26 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5422, &(0x7f0000000000)=""/80)

04:16:26 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000000003fe, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$SOCK_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xcc, 0x15, 0x100, 0x70bd28, 0x25dfdbfb, {0x27, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "2de2ac173a889e3da634adcfb7dc07584f72e5724569f0628a59892c0a4355d31253432e3de1aba6f04d036ecadddfedcd568b166ece5b799a46dc0d0cf9ecf1aa4a911a9f7514a6f828589cbe112ed02fc05d6073abeed13b84d95ae8217c7ca05ec42d489615d3d643a69903208a1d2f898993a6a3fd18539ce011890245753a5e7cf8350236f23aa5b15f337285f39d0451817700de4188d953c030395b5c369dcdf6834328f182749af7b3f1bf612bb5a3"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

04:16:27 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8914, &(0x7f0000000200))

04:16:27 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5423, &(0x7f0000000000)=""/80)

04:16:27 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000200))

04:16:27 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8916, &(0x7f0000000200))

04:16:27 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0xa)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x5, 0xc, 0x4, 0x2000, 0xfffffffc, {}, {0x5, 0x8, 0x40, 0x4, 0x8, 0x84, "14dac5c4"}, 0x3, 0x4, @userptr=0x7, 0x2})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000180)=""/57, &(0x7f0000000200)=0x39)
r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000000c0)=0x10001)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  912.228252][   T26] audit: type=1804 audit(1582431387.208:440): pid=29342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/944/bus" dev="sda1" ino=17089 res=1
04:16:27 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000500, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:27 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5424, &(0x7f0000000000)=""/80)

[  912.231259][   T26] audit: type=1804 audit(1582431387.208:441): pid=29342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/944/bus" dev="sda1" ino=17089 res=1
04:16:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24050}, 0x800)
socket$inet_tcp(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
eventfd2(0x8, 0x800)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400070000000000fcdbdf2502ff0006667e279639a91d7b7f0000017daf4204a00b32eadc282841ac14140ee3d8960f65b27ee8125f426c0fa9447015739d53d5000000f30327955ca2302174d22c041b836751e56de8d37980b0c019ae7224d9e3364dd85f2e9e37474c610d7a7315448cd7f1936c059be213152bf2042d6d9490bce58db7e2d576535890807b82bdc658afdd2d72df561f03523479bd785500943aaea67dd6b4dcde9f3bc809395fd8099fe2cfc07afc18335185285f91f67e26ffe3c182f02293670135064719a68ecce20100502d4661484cc303844a2ce7a1cf1f6929ac93757d85f1e55711e723747b567637e30dbefbc100006d7214c1348d00000000000000000c243d8b3d695da574f12efc33194f7f8b44781d65c6689a9485b4f2d4ab4ecefdc3213829d80c6a07b927cda5aec2b95cc6ce82472f5e6bf38654bc4bd28dd90687aca5afbccb4ea3"], 0x48}}, 0x80)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getpeername$ax25(r2, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @default, @bcast, @remote, @default, @remote, @default, @default]}, &(0x7f00000000c0)=0x48)

04:16:27 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8933, &(0x7f0000000200))

04:16:27 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6c, &(0x7f0000000200))

[  912.670399][   T26] audit: type=1804 audit(1582431387.648:442): pid=29519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/945/bus" dev="sda1" ino=17107 res=1
[  912.683682][   T26] audit: type=1804 audit(1582431387.658:443): pid=29519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/945/bus" dev="sda1" ino=17107 res=1
04:16:27 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5425, &(0x7f0000000000)=""/80)

04:16:27 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=<r2=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000100), &(0x7f0000000140)=0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000040))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_PASTESEL(r5, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000300)="9b05e6636584552e21091839e7de4d6780284ee4ea4c49edb2d2844a3bc2a2c0e1b765a118a9686ac8fd8c0a73458faa720fcb34e2e6d28cf64057f4d7817562b46b643d48b0daed07e6f1d2a6b7f06912a4080b5c7f779f3891d7adcb8000781381a5d5dc8f94cd8dacf6138f2cab29bb51249e5d4d95267b3471547626b59b6ac36a0e11b5adcb3f96170a8e971aedbd9527f76953048739b1c429389c7840a2f23c80d886fd3f6217441bfab19669")

04:16:27 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000600, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8982, &(0x7f0000000200))

04:16:28 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b6d, &(0x7f0000000200))

04:16:28 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5427, &(0x7f0000000000)=""/80)

04:16:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TCSETX(r1, 0x5433, &(0x7f00000000c0)={0x4, 0x2, [0xc1, 0xf07, 0x0, 0x306e, 0x2f22], 0x6a})
socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r3, 0x5412, &(0x7f0000000000))
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000000))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r4, 0x5412, &(0x7f0000000000))
ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x3)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  913.113111][   T26] audit: type=1804 audit(1582431388.088:444): pid=29688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/946/bus" dev="sda1" ino=16563 res=1
04:16:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x89e1, &(0x7f0000000200))

[  913.245873][   T26] audit: type=1804 audit(1582431388.128:445): pid=29688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/946/bus" dev="sda1" ino=16563 res=1
04:16:28 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b70, &(0x7f0000000200))

04:16:28 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5428, &(0x7f0000000000)=""/80)

04:16:28 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000700, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x89f1, &(0x7f0000000200))

04:16:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r5, @ANYRES16, @ANYRESHEX=r6, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRESDEC=r8, @ANYRES64=r7, @ANYBLOB="6a528bc8187e22842b0e6aad3171b3982a02d2da49760aff1acc85ece54874d0f55d14aabc96be2bb6295de3d2a90b58c41bcd161ad02e9898c89459e2dbaceb61b17bab0d82d95393df1e9abea53866618a41e671dfdad087ba4d71fc1f19b18b89878b2cafd2d859bdd890da011a75d9c88a373a3852bcfc9b0e349940d272d180172901c97d40d84950988c44e044d5115343cd8ca7e9b38a3b"], 0xa}, 0x1, 0x0, 0x0, 0x44804}, 0x12)

04:16:28 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x18400, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffd}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c5}, 0x20000051)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:28 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b71, &(0x7f0000000200))

04:16:28 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5429, &(0x7f0000000000)=""/80)

04:16:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40042409, &(0x7f0000000200))

[  913.686482][   T26] audit: type=1804 audit(1582431388.668:446): pid=29823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/947/bus" dev="sda1" ino=16817 res=1
04:16:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40044103, &(0x7f0000000200))

04:16:28 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5437, &(0x7f0000000000)=""/80)

04:16:28 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000001100, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  913.699901][   T26] audit: type=1804 audit(1582431388.678:447): pid=29823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/947/bus" dev="sda1" ino=16817 res=1
04:16:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r4, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x40, @remote, 0x8}, r4}}, 0x30)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x810)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socket$inet_tcp(0x2, 0x3, 0x6)
semget(0x2, 0x3, 0x114)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x80)

[  914.094814][   T26] audit: type=1804 audit(1582431389.068:448): pid=29946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/948/bus" dev="sda1" ino=17297 res=1
04:16:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b72, &(0x7f0000000200))

04:16:29 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5441, &(0x7f0000000000)=""/80)

04:16:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x400454ca, &(0x7f0000000200))

04:16:29 executing program 1 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:29 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:29 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000002000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:29 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5450, &(0x7f0000000000)=""/80)

04:16:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4bfa, &(0x7f0000000200))

04:16:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40049409, &(0x7f0000000200))

04:16:29 executing program 1 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

[  914.533398][T30168] FAULT_INJECTION: forcing a failure.
[  914.533398][T30168] name failslab, interval 1, probability 0, space 0, times 0
04:16:29 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5451, &(0x7f0000000000)=""/80)

[  914.533421][T30168] CPU: 0 PID: 30168 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0
[  914.533432][T30168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
04:16:29 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000004000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4bfb, &(0x7f0000000200))

04:16:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40086602, &(0x7f0000000200))

04:16:29 executing program 1 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:29 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5452, &(0x7f0000000000)=""/80)

[  914.533437][T30168] Call Trace:
[  914.533463][T30168]  dump_stack+0x197/0x210
[  914.533497][T30168]  should_fail.cold+0x5/0xd
[  914.533526][T30168]  ? fault_create_debugfs_attr+0x140/0x140
[  914.533553][T30168]  ? ___might_sleep+0x163/0x2c0
[  914.533581][T30168]  __should_failslab+0xb7/0x100
[  914.533599][T30168]  should_failslab+0x9/0x14
[  914.533615][T30168]  __kmalloc+0x2e0/0x770
[  914.533629][T30168]  ? mark_held_locks+0xf0/0xf0
[  914.533644][T30168]  ? mark_lock+0xc2/0x1220
[  914.533659][T30168]  ? _parse_integer+0x190/0x190
[  914.533682][T30168]  ? tomoyo_realpath_from_path+0xc5/0x660
[  914.533708][T30168]  tomoyo_realpath_from_path+0xc5/0x660
[  914.533724][T30168]  ? tomoyo_path_number_perm+0x193/0x520
[  914.533758][T30168]  tomoyo_path_number_perm+0x1dd/0x520
[  914.533772][T30168]  ? tomoyo_path_number_perm+0x193/0x520
[  914.533795][T30168]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  914.533819][T30168]  ? perf_trace_lock_acquire+0xf5/0x530
[  914.533913][T30168]  ? __fget_files+0x359/0x520
[  914.533948][T30168]  ? ksys_dup3+0x3e0/0x3e0
[  914.533967][T30168]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  914.533983][T30168]  ? fput_many+0x12c/0x1a0
04:16:30 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000004003, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  914.534013][T30168]  tomoyo_file_ioctl+0x23/0x30
[  914.534036][T30168]  security_file_ioctl+0x77/0xc0
[  914.534064][T30168]  ksys_ioctl+0x56/0x180
[  914.534092][T30168]  __x64_sys_ioctl+0x73/0xb0
[  914.534116][T30168]  do_syscall_64+0xfa/0x790
[  914.534144][T30168]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  914.534157][T30168] RIP: 0033:0x45c429
[  914.534173][T30168] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
04:16:30 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x545d, &(0x7f0000000000)=""/80)

[  914.534182][T30168] RSP: 002b:00007fc5a4a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  914.534198][T30168] RAX: ffffffffffffffda RBX: 00007fc5a4a6a6d4 RCX: 000000000045c429
[  914.534207][T30168] RDX: 0000000020000200 RSI: 0000000000005452 RDI: 0000000000000003
[  914.534217][T30168] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  914.534226][T30168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  914.534234][T30168] R13: 000000000000041a R14: 00000000004c676d R15: 0000000000000000
04:16:30 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c00, &(0x7f0000000200))

04:16:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4008ae48, &(0x7f0000000200))

[  914.534277][T30168] ERROR: Out of memory at tomoyo_realpath_from_path.
[  914.792380][T30286] FAULT_INJECTION: forcing a failure.
[  914.792380][T30286] name failslab, interval 1, probability 0, space 0, times 0
[  914.792404][T30286] CPU: 0 PID: 30286 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0
[  914.792415][T30286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  914.792422][T30286] Call Trace:
[  914.792448][T30286]  dump_stack+0x197/0x210
[  914.792482][T30286]  should_fail.cold+0x5/0xd
[  914.792510][T30286]  ? fault_create_debugfs_attr+0x140/0x140
[  914.792538][T30286]  ? ___might_sleep+0x163/0x2c0
[  914.792567][T30286]  __should_failslab+0xb7/0x100
[  914.792587][T30286]  should_failslab+0x9/0x14
[  914.792604][T30286]  __kmalloc+0x2e0/0x770
[  914.792624][T30286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  914.792645][T30286]  ? d_absolute_path+0x11b/0x170
[  914.792665][T30286]  ? __d_path+0x140/0x140
[  914.792683][T30286]  ? tomoyo_encode2.part.0+0xf5/0x400
[  914.792720][T30286]  tomoyo_encode2.part.0+0xf5/0x400
04:16:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000100)=0xc)
ptrace$getregs(0xc, r2, 0xfffffffffffffffa, &(0x7f0000000240)=""/241)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))
r3 = fcntl$getown(r1, 0x9)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = getpid()
sched_setscheduler(r8, 0x5, &(0x7f0000000380))
r9 = gettid()
waitid(0x83b895581628fca4, r9, 0x0, 0x2, &(0x7f0000000480))
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
r11 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r10, r11, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r12}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r9, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r12}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r12}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r13=>0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r12}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r12}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r12}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r8, r7, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r12}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r6, 0x0, 0xd, &(0x7f0000000080)='vmnet1{+GPL\xe2\x00', r12}, 0x30)
write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x5}}, 0x18)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")

[  914.792749][T30286]  tomoyo_encode+0x2b/0x50
[  914.792773][T30286]  tomoyo_realpath_from_path+0x19c/0x660
[  914.792812][T30286]  tomoyo_path_number_perm+0x1dd/0x520
[  914.792826][T30286]  ? tomoyo_path_number_perm+0x193/0x520
[  914.792853][T30286]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  914.792870][T30286]  ? perf_trace_lock_acquire+0xf5/0x530
[  914.792954][T30286]  ? __fget_files+0x359/0x520
[  914.792987][T30286]  ? ksys_dup3+0x3e0/0x3e0
[  914.793004][T30286]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  914.793019][T30286]  ? fput_many+0x12c/0x1a0
[  914.793048][T30286]  tomoyo_file_ioctl+0x23/0x30
[  914.793069][T30286]  security_file_ioctl+0x77/0xc0
[  914.793103][T30286]  ksys_ioctl+0x56/0x180
[  914.793130][T30286]  __x64_sys_ioctl+0x73/0xb0
[  914.793155][T30286]  do_syscall_64+0xfa/0x790
[  914.793182][T30286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  914.793195][T30286] RIP: 0033:0x45c429
[  914.793211][T30286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  914.793220][T30286] RSP: 002b:00007fc5a4a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  914.793236][T30286] RAX: ffffffffffffffda RBX: 00007fc5a4a6a6d4 RCX: 000000000045c429
[  914.793246][T30286] RDX: 0000000020000200 RSI: 0000000000005452 RDI: 0000000000000003
[  914.793255][T30286] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  914.793263][T30286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  914.793272][T30286] R13: 000000000000041a R14: 00000000004c676d R15: 0000000000000001
[  914.824352][T30286] ERROR: Out of memory at tomoyo_realpath_from_path.
[  915.086900][T30311] FAULT_INJECTION: forcing a failure.
[  915.086900][T30311] name failslab, interval 1, probability 0, space 0, times 0
[  915.086922][T30311] CPU: 0 PID: 30311 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0
[  915.086933][T30311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  915.086939][T30311] Call Trace:
[  915.086965][T30311]  dump_stack+0x197/0x210
04:16:30 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5460, &(0x7f0000000000)=""/80)

[  915.086999][T30311]  should_fail.cold+0x5/0xd
[  915.087026][T30311]  ? fault_create_debugfs_attr+0x140/0x140
[  915.087053][T30311]  ? ___might_sleep+0x163/0x2c0
[  915.087080][T30311]  __should_failslab+0xb7/0x100
[  915.087099][T30311]  should_failslab+0x9/0x14
[  915.087115][T30311]  __kmalloc+0x2e0/0x770
[  915.087135][T30311]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  915.087156][T30311]  ? d_absolute_path+0x11b/0x170
[  915.087175][T30311]  ? __d_path+0x140/0x140
[  915.087193][T30311]  ? tomoyo_encode2.part.0+0xf5/0x400
04:16:30 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c01, &(0x7f0000000200))

[  915.087220][T30311]  tomoyo_encode2.part.0+0xf5/0x400
[  915.087247][T30311]  tomoyo_encode+0x2b/0x50
[  915.087265][T30311]  tomoyo_realpath_from_path+0x19c/0x660
[  915.087303][T30311]  tomoyo_path_number_perm+0x1dd/0x520
[  915.087318][T30311]  ? tomoyo_path_number_perm+0x193/0x520
[  915.087343][T30311]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  915.087359][T30311]  ? perf_trace_lock_acquire+0xf5/0x530
[  915.087448][T30311]  ? __fget_files+0x359/0x520
[  915.087483][T30311]  ? ksys_dup3+0x3e0/0x3e0
[  915.087499][T30311]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  915.087522][T30311]  ? fput_many+0x12c/0x1a0
[  915.087553][T30311]  tomoyo_file_ioctl+0x23/0x30
[  915.087577][T30311]  security_file_ioctl+0x77/0xc0
[  915.087606][T30311]  ksys_ioctl+0x56/0x180
[  915.087635][T30311]  __x64_sys_ioctl+0x73/0xb0
[  915.087660][T30311]  do_syscall_64+0xfa/0x790
[  915.087688][T30311]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  915.087701][T30311] RIP: 0033:0x45c429
04:16:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="9bfc3207de5800bff440810bfd958d6455eda879f99946fe7c5457fcac75403b720d7a4a89ab186a543a36b99fb18c65bf8aaf12e4e811cca936d7a6c5c0022ead35dec0176b35ac42838d9f70c4df8ee4fce26b7c714c010ba2a0e152d20f6c6fab2ee9f2c767bf929d9e0b5cd1fcb098e5d0fd7684824cb875af")
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8880, 0x0)
getdents64(r1, &(0x7f0000000040)=""/19, 0x13)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0xa74e, &(0x7f0000000080)='ipvlan0\x00', 0x5, 0x80000000, 0x81})

[  915.087717][T30311] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  915.087726][T30311] RSP: 002b:00007fc5a4a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  915.087742][T30311] RAX: ffffffffffffffda RBX: 00007fc5a4a6a6d4 RCX: 000000000045c429
[  915.087752][T30311] RDX: 0000000020000200 RSI: 0000000000005452 RDI: 0000000000000003
[  915.087771][T30311] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  915.087780][T30311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  915.087790][T30311] R13: 000000000000041a R14: 00000000004c676d R15: 0000000000000002
[  915.090193][T30311] ERROR: Out of memory at tomoyo_realpath_from_path.
04:16:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4010ae42, &(0x7f0000000200))

04:16:30 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5600, &(0x7f0000000000)=""/80)

04:16:31 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:31 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000004800, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:31 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4010aeac, &(0x7f0000000200))

04:16:31 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c4b, &(0x7f0000000200))

04:16:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:31 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5601, &(0x7f0000000000)=""/80)

04:16:31 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40186366, &(0x7f0000000200))

04:16:31 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4d4b, &(0x7f0000000200))

04:16:31 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x2, &(0x7f0000000200)="9b")

04:16:31 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5602, &(0x7f0000000000)=""/80)

04:16:31 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000004c00, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:31 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r3 = dup(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000000000)=0xc)
setreuid(0x0, r4)
ioprio_get$uid(0x3, r4)

04:16:31 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4e4b, &(0x7f0000000200))

04:16:31 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4020940d, &(0x7f0000000200))

04:16:31 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x10, &(0x7f0000000200)="9b")

04:16:31 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5603, &(0x7f0000000000)=""/80)

04:16:31 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5054, &(0x7f0000000200))

04:16:31 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4040534e, &(0x7f0000000200))

04:16:31 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b41, &(0x7f0000000200)="9b")

04:16:32 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5605, &(0x7f0000000000)=""/80)

04:16:32 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000005603, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  916.849608][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  916.849624][   T26] audit: type=1804 audit(1582431391.828:458): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/953/bus" dev="sda1" ino=17569 res=1
04:16:32 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40485404, &(0x7f0000000200))

04:16:32 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5154, &(0x7f0000000200))

[  916.881872][   T26] audit: type=1804 audit(1582431391.858:459): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/953/bus" dev="sda1" ino=17569 res=1
[  917.362887][   T26] audit: type=1804 audit(1582431392.338:460): pid=30908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/954/bus" dev="sda1" ino=17617 res=1
[  917.383209][   T26] audit: type=1804 audit(1582431392.358:461): pid=30908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/954/bus" dev="sda1" ino=17617 res=1
04:16:32 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80045432, &(0x7f0000000200))

04:16:32 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x524b, &(0x7f0000000200))

04:16:32 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c00, &(0x7f0000000200)="9b")

04:16:32 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000006000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:32 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5606, &(0x7f0000000000)=""/80)

04:16:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x100010, r1, 0x0)
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000000)={0x6000, 0x4, 0x7f, 0x1f, 0x8})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0))
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x1, 'caif0\x00', {}, 0x1})
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/157)
openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)

04:16:32 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80045440, &(0x7f0000000200))

04:16:32 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5254, &(0x7f0000000200))

04:16:32 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4c01, &(0x7f0000000200)="9b")

[  917.864513][   T26] audit: type=1804 audit(1582431392.838:462): pid=31033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/955/bus" dev="sda1" ino=17377 res=1
04:16:32 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5607, &(0x7f0000000000)=""/80)

[  917.993203][   T26] audit: type=1804 audit(1582431392.878:463): pid=31033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/955/bus" dev="sda1" ino=17377 res=1
04:16:33 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000006001, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80086301, &(0x7f0000000200))

[  918.315383][   T26] audit: type=1804 audit(1582431393.288:464): pid=31156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/956/bus" dev="sda1" ino=17617 res=1
[  918.359747][   T26] audit: type=1804 audit(1582431393.318:465): pid=31156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/956/bus" dev="sda1" ino=17617 res=1
04:16:33 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20001, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000140))
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="079c9754f3d81a028ca9ab23c441faf485e40adc1bd2bbc442d298530544ec09f1bbf964bfa319edba084b1df585178b2ef32dc99c6e68163f7a3849656ef443d9580dd36c2bbd8cd02060ef")

04:16:33 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5412, &(0x7f0000000200)="9b")

04:16:33 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5409, &(0x7f0000000200))

04:16:33 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5608, &(0x7f0000000000)=""/80)

04:16:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8010550e, &(0x7f0000000200))

04:16:33 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000006002, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8010743f, &(0x7f0000000200))

04:16:33 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540b, &(0x7f0000000200))

04:16:33 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541b, &(0x7f0000000200)="9b")

04:16:33 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x5609, &(0x7f0000000000)=""/80)

[  918.681449][T31277] Unknown ioctl 21522
[  918.693613][   T26] audit: type=1804 audit(1582431393.668:466): pid=31276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/957/bus" dev="sda1" ino=17729 res=1
04:16:33 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000006603, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:33 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540c, &(0x7f0000000200))

04:16:33 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCSBRK(r1, 0x5427)

04:16:33 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5421, &(0x7f0000000200)="9b")

04:16:33 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x560a, &(0x7f0000000000)=""/80)

04:16:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045002, &(0x7f0000000200))

04:16:34 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5428, &(0x7f0000000200)="9b")

04:16:34 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540d, &(0x7f0000000200))

04:16:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045003, &(0x7f0000000200))

04:16:34 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x560b, &(0x7f0000000000)=""/80)

04:16:34 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000006800, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:34 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540e, &(0x7f0000000200))

04:16:34 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5450, &(0x7f0000000200)="9b")

04:16:34 executing program 3:
r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @null, @default, @null, @null, @bcast, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="9bfc")

04:16:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc004500a, &(0x7f0000000200))

04:16:34 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x560c, &(0x7f0000000000)=""/80)

[  919.655209][   T26] audit: type=1804 audit(1582431394.628:467): pid=31626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/959/bus" dev="sda1" ino=17697 res=1
04:16:34 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5451, &(0x7f0000000200)="9b")

04:16:34 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x540f, &(0x7f0000000200))

04:16:34 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x560d, &(0x7f0000000000)=""/80)

04:16:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045878, &(0x7f0000000200))

04:16:34 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000006c00, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:35 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5460, &(0x7f0000000200)="9b")

04:16:35 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5410, &(0x7f0000000200))

04:16:35 executing program 3:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)="9bfc")
r0 = socket(0x2, 0x4, 0x7f)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000)

04:16:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045878, &(0x7f0000000200))

04:16:35 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x560e, &(0x7f0000000000)=""/80)

04:16:35 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6364, &(0x7f0000000200)="9b")

04:16:35 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5412, &(0x7f0000000200))

04:16:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc01064b5, &(0x7f0000000200))

04:16:35 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000007002, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:35 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x204001, 0x0)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000240)="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")
fsmount(r0, 0x0, 0x81)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x4200, 0x0)

04:16:35 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8912, &(0x7f0000000200)="9b")

04:16:35 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5413, &(0x7f0000000200))

04:16:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0189436, &(0x7f0000000200))

04:16:35 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8933, &(0x7f0000000200)="9b")

04:16:35 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="9bfc")
sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="71eaf6ff2ace9bce238be83123c61e1daf112060e49e016663f37cd13d2cad5f291a6b18a4fd7a48a30c602ac3a2973baafd79689c1a72352ddd9d6fa81ecf6369554b4fb15a18ffceb047f1d60daa2cf77a6f831d4bbeeef9119a39bc933a71dad3dcfac341b0732d102a64025bc4c8f89a162f3f9ea78065458afd01aad5895d93dc54751f51ef68526ae2fd8b1d7e13dfc6c0d68a74cc310855846d3bb6acfb708e323a05360757153560f23653ce03614bbf0ef37423468ae3772be0e2ef5866", 0xc2, 0x84, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400042, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x4, 0x0, 0x8}}, 0x14)

04:16:35 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5414, &(0x7f0000000200))

04:16:36 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x560f, &(0x7f0000000000)=""/80)

04:16:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc020660b, &(0x7f0000000200))

04:16:36 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000007400, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:36 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8946, &(0x7f0000000200)="9b")

04:16:36 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5415, &(0x7f0000000200))

04:16:36 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x80)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="d8f0")

04:16:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc04c6100, &(0x7f0000000200))

04:16:36 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xae01, &(0x7f0000000200)="9b")

04:16:36 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5416, &(0x7f0000000200))

04:16:36 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x6364, &(0x7f0000000000)=""/80)

04:16:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0984124, &(0x7f0000000200))

04:16:36 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000007801, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:36 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xae41, &(0x7f0000000200)="9b")

04:16:36 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x8904, &(0x7f0000000000)=""/80)

04:16:36 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5418, &(0x7f0000000200))

04:16:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$TIOCCONS(r0, 0x541d)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r3, 0x5412, &(0x7f0000000000))
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)=0x1)
syz_open_pts(r2, 0x2)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/224)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="0124f7b1a6a004fcf5c8e2c3eb937e1c9e6041b5a2f3dad7f5d1e4fb6988e62e7530a62a37109bf95817cef6fafef20fe57ede941cc750781607cd9610f285703e45aef1988aff8dc6792439e63f8514d2204b69b5155c112452941a624f9be7ff779e2a884e7aa645b517b701b95b0eac5e339966aebc09e4d54edc8073846b95aa645a32c52854d4759572c57d297c66662764908ba8d6634d02ac1bbe530cbece2bf51dc194a1586bf4105b30dcb5d145ec8733dbbe2ef22a02dfe9")

04:16:36 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xae80, &(0x7f0000000200)="9b")

04:16:36 executing program 3 (fault-call:3 fault-nth:0):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

[  921.917170][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  921.917186][   T26] audit: type=1804 audit(1582431396.898:475): pid=32158 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/963/bus" dev="sda1" ino=16596 res=1
04:16:37 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x8905, &(0x7f0000000000)=""/80)

[  922.076968][   T26] audit: type=1804 audit(1582431396.938:476): pid=32158 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/963/bus" dev="sda1" ino=16596 res=1
[  922.097689][T32197] FAULT_INJECTION: forcing a failure.
[  922.097689][T32197] name failslab, interval 1, probability 0, space 0, times 0
[  922.172121][T32197] CPU: 0 PID: 32197 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0
[  922.180863][T32197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  922.190942][T32197] Call Trace:
[  922.194275][T32197]  dump_stack+0x197/0x210
[  922.198667][T32197]  should_fail.cold+0x5/0xd
[  922.203751][T32197]  ? fault_create_debugfs_attr+0x140/0x140
[  922.209607][T32197]  ? ___might_sleep+0x163/0x2c0
[  922.214510][T32197]  __should_failslab+0xb7/0x100
04:16:37 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x8912, &(0x7f0000000000)=""/80)

[  922.219416][T32197]  should_failslab+0x9/0x14
[  922.223948][T32197]  __kmalloc+0x2e0/0x770
[  922.228211][T32197]  ? mark_held_locks+0xf0/0xf0
[  922.233015][T32197]  ? debug_smp_processor_id+0x33/0x18a
[  922.238500][T32197]  ? tomoyo_realpath_from_path+0xc5/0x660
[  922.245229][T32197]  tomoyo_realpath_from_path+0xc5/0x660
[  922.250797][T32197]  ? tomoyo_path_number_perm+0x193/0x520
[  922.256488][T32197]  tomoyo_path_number_perm+0x1dd/0x520
[  922.261971][T32197]  ? tomoyo_path_number_perm+0x193/0x520
04:16:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000007a00, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  922.267648][T32197]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  922.273620][T32197]  ? __fget_files+0x359/0x520
[  922.278350][T32197]  ? ksys_dup3+0x3e0/0x3e0
[  922.282792][T32197]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  922.289056][T32197]  ? fput_many+0x12c/0x1a0
[  922.293537][T32197]  tomoyo_file_ioctl+0x23/0x30
[  922.298332][T32197]  security_file_ioctl+0x77/0xc0
[  922.303304][T32197]  ksys_ioctl+0x56/0x180
[  922.307595][T32197]  __x64_sys_ioctl+0x73/0xb0
[  922.312236][T32197]  do_syscall_64+0xfa/0x790
[  922.316791][T32197]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  922.322705][T32197] RIP: 0033:0x45c429
[  922.326645][T32197] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  922.346289][T32197] RSP: 002b:00007fd161a49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  922.354723][T32197] RAX: ffffffffffffffda RBX: 00007fd161a4a6d4 RCX: 000000000045c429
[  922.362734][T32197] RDX: 0000000020000300 RSI: 0000000000004b49 RDI: 0000000000000004
04:16:37 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541b, &(0x7f0000000200))

[  922.370723][T32197] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  922.378827][T32197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  922.386813][T32197] R13: 0000000000000382 R14: 00000000004c5b0d R15: 0000000000000000
04:16:37 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40044620, &(0x7f0000000200)="9b")

[  922.442172][T32197] ERROR: Out of memory at tomoyo_realpath_from_path.
04:16:37 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x8914, &(0x7f0000000000)=""/80)

04:16:37 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x200, 0x0)
sendmsg$rds(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x7}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)=""/208, 0xd0}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/184, 0xb8}], 0x7, &(0x7f0000000640)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0x1}, &(0x7f00000005c0)=0x4, &(0x7f0000000600)=0x1, 0xffff, 0x5, 0x8, 0x1ff, 0x10, 0xbe}}], 0x58, 0x4040}, 0x880)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$VT_DISALLOCATE(r2, 0x5608)

[  922.589953][   T26] audit: type=1804 audit(1582431397.568:477): pid=32386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/964/bus" dev="sda1" ino=17926 res=1
04:16:37 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541c, &(0x7f0000000200))

04:16:37 executing program 3 (fault-call:3 fault-nth:1):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

04:16:37 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x400454ca, &(0x7f0000000200)="9b")

[  922.690128][   T26] audit: type=1804 audit(1582431397.568:478): pid=32386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/964/bus" dev="sda1" ino=17926 res=1
[  922.859355][T32508] FAULT_INJECTION: forcing a failure.
[  922.859355][T32508] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  922.872602][T32508] CPU: 1 PID: 32508 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0
[  922.881292][T32508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  922.891357][T32508] Call Trace:
[  922.894949][T32508]  dump_stack+0x197/0x210
[  922.899319][T32508]  should_fail.cold+0x5/0xd
[  922.903856][T32508]  ? fault_create_debugfs_attr+0x140/0x140
[  922.909722][T32508]  ? __kasan_check_read+0x11/0x20
[  922.914780][T32508]  ? mark_lock+0xc2/0x1220
[  922.919213][T32508]  ? kernel_text_address+0xe9/0x110
[  922.924447][T32508]  should_fail_alloc_page+0x50/0x60
[  922.929671][T32508]  __alloc_pages_nodemask+0x1a1/0x910
[  922.935069][T32508]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  922.941324][T32508]  ? debug_smp_processor_id+0x33/0x18a
[  922.946824][T32508]  ? __alloc_pages_slowpath+0x2900/0x2900
[  922.952557][T32508]  ? __kasan_check_read+0x11/0x20
[  922.957625][T32508]  cache_grow_begin+0x90/0xc60
[  922.962440][T32508]  ? trace_hardirqs_off+0x62/0x240
[  922.967586][T32508]  __kmalloc+0x6b2/0x770
[  922.971844][T32508]  ? mark_held_locks+0xf0/0xf0
[  922.976695][T32508]  ? mark_lock+0xc2/0x1220
[  922.981138][T32508]  ? tomoyo_realpath_from_path+0xc5/0x660
[  922.986884][T32508]  tomoyo_realpath_from_path+0xc5/0x660
[  922.992442][T32508]  ? tomoyo_path_number_perm+0x193/0x520
[  922.998115][T32508]  tomoyo_path_number_perm+0x1dd/0x520
[  923.003594][T32508]  ? tomoyo_path_number_perm+0x193/0x520
[  923.009270][T32508]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  923.015109][T32508]  ? perf_trace_lock_acquire+0xf5/0x530
[  923.020743][T32508]  ? __fget_files+0x359/0x520
[  923.025452][T32508]  ? ksys_dup3+0x3e0/0x3e0
[  923.029885][T32508]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  923.036270][T32508]  ? fput_many+0x12c/0x1a0
[  923.040728][T32508]  tomoyo_file_ioctl+0x23/0x30
[  923.045514][T32508]  security_file_ioctl+0x77/0xc0
[  923.050494][T32508]  ksys_ioctl+0x56/0x180
[  923.054769][T32508]  __x64_sys_ioctl+0x73/0xb0
[  923.059503][T32508]  do_syscall_64+0xfa/0x790
[  923.064034][T32508]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  923.069935][T32508] RIP: 0033:0x45c429
[  923.073845][T32508] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  923.093461][T32508] RSP: 002b:00007fd161a49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  923.101893][T32508] RAX: ffffffffffffffda RBX: 00007fd161a4a6d4 RCX: 000000000045c429
04:16:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000008600, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:37 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x8933, &(0x7f0000000000)=""/80)

04:16:38 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541d, &(0x7f0000000200))

04:16:38 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000040)="2af31435813bf97a1c8d91fd03cf7ebde88d11547a385a11dc7a1c28f378ea6af367d4a4eebe5b9c585ea982112adcccadd290b00e7e973bc64de3c00904d1ca56619df383156edb2a4a0afbcf9dddb513b3c017e252e913375696ba0a328859a3dda0ba02a2cc85b05d4760c8")
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2)

04:16:38 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x8941, &(0x7f0000000000)=""/80)

[  923.109875][T32508] RDX: 0000000020000300 RSI: 0000000000004b49 RDI: 0000000000000004
[  923.117857][T32508] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  923.125840][T32508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  923.133817][T32508] R13: 0000000000000382 R14: 00000000004c5b0d R15: 0000000000000001
[  923.179648][   T26] audit: type=1804 audit(1582431397.838:479): pid=32611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/965/bus" dev="sda1" ino=17697 res=1
[  923.204960][   T26] audit: type=1804 audit(1582431397.838:480): pid=32611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/965/bus" dev="sda1" ino=17697 res=1
04:16:38 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541e, &(0x7f0000000200))

04:16:38 executing program 3 (fault-call:3 fault-nth:2):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

04:16:38 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4004551e, &(0x7f0000000200)="9b")

04:16:38 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000008800, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:38 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xab02, &(0x7f0000000000)=""/80)

04:16:38 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000000)="209cb2f88fcb6335962b83919e79b28587973e3b3f90cc8a17eb44fbeafd7fe7e100c3fd4f643d4267d1280404fdf1f46652deed388a965861945b4cf5e02afdb7d5374f6b47ec1737c2fb52a7ce69341e2eb478975330b8adbc1ab7d05fe53ed415f024369eda2922624f3c20ac4b1d5137c01586dc4a68ce0d3092a9530dc2f9c6884b8698c49f8f84e690077b92136fccbbd79b1980a6bbadef415c89b45b87249d40f9c43cbc778b3da61c265f01000000")

04:16:38 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x541e, &(0x7f0000000200))

[  923.514048][  T467] FAULT_INJECTION: forcing a failure.
[  923.514048][  T467] name failslab, interval 1, probability 0, space 0, times 0
[  923.645958][  T467] CPU: 1 PID: 467 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0
[  923.654520][  T467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  923.664588][  T467] Call Trace:
[  923.667904][  T467]  dump_stack+0x197/0x210
[  923.672267][  T467]  should_fail.cold+0x5/0xd
[  923.676800][  T467]  ? fault_create_debugfs_attr+0x140/0x140
[  923.682637][  T467]  ? ___might_sleep+0x163/0x2c0
[  923.687522][  T467]  __should_failslab+0xb7/0x100
[  923.692388][  T467]  should_failslab+0x9/0x14
[  923.696933][  T467]  kmem_cache_alloc_trace+0x2d3/0x790
[  923.702505][  T467]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  923.708771][  T467]  ? ns_capable_common+0x93/0x100
[  923.713838][  T467]  vt_do_kdgkb_ioctl+0x79/0xb50
[  923.718705][  T467]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  923.724967][  T467]  ? security_capable+0x95/0xc0
[  923.729849][  T467]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  923.736109][  T467]  ? ns_capable_common+0x93/0x100
[  923.741177][  T467]  vt_ioctl+0x47e/0x26c0
[  923.745447][  T467]  ? complete_change_console+0x3a0/0x3a0
[  923.751101][  T467]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  923.757119][  T467]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  923.763038][  T467]  ? tty_jobctrl_ioctl+0x50/0xd40
[  923.768083][  T467]  ? complete_change_console+0x3a0/0x3a0
[  923.773741][  T467]  tty_ioctl+0xa37/0x14f0
[  923.778105][  T467]  ? tty_vhangup+0x30/0x30
[  923.782539][  T467]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  923.788797][  T467]  ? do_vfs_ioctl+0x568/0x13b0
[  923.793598][  T467]  ? ioctl_file_clone+0x180/0x180
[  923.798638][  T467]  ? __fget_files+0x359/0x520
[  923.803447][  T467]  ? ksys_dup3+0x3e0/0x3e0
[  923.807893][  T467]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  923.814188][  T467]  ? fput_many+0x12c/0x1a0
[  923.818637][  T467]  ? tomoyo_file_ioctl+0x23/0x30
[  923.823604][  T467]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  923.829867][  T467]  ? security_file_ioctl+0x8d/0xc0
[  923.835094][  T467]  ? tty_vhangup+0x30/0x30
[  923.839546][  T467]  ksys_ioctl+0x123/0x180
[  923.843903][  T467]  __x64_sys_ioctl+0x73/0xb0
[  923.848542][  T467]  do_syscall_64+0xfa/0x790
[  923.853080][  T467]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  923.858990][  T467] RIP: 0033:0x45c429
[  923.862901][  T467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  923.882642][  T467] RSP: 002b:00007fd161a28c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
04:16:38 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40049409, &(0x7f0000000200)="9b")

04:16:38 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xaea2, &(0x7f0000000000)=""/80)

04:16:38 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000a001, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:38 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40086602, &(0x7f0000000200)="9b")

04:16:38 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x40042408, &(0x7f0000000000)=""/80)

[  923.891074][  T467] RAX: ffffffffffffffda RBX: 00007fd161a296d4 RCX: 000000000045c429
[  923.899059][  T467] RDX: 0000000020000300 RSI: 0000000000004b49 RDI: 0000000000000003
[  923.907085][  T467] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  923.915073][  T467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  923.923057][  T467] R13: 0000000000000382 R14: 00000000004c5b0d R15: 0000000000000002
04:16:38 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0xc1, "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"})
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

[  923.931945][   T26] audit: type=1804 audit(1582431398.628:481): pid=471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/966/bus" dev="sda1" ino=17931 res=1
[  924.093310][   T26] audit: type=1804 audit(1582431398.628:482): pid=471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/966/bus" dev="sda1" ino=17931 res=1
04:16:39 executing program 3 (fault-call:3 fault-nth:3):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

04:16:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4008700c, &(0x7f0000000200)="9b")

04:16:39 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5421, &(0x7f0000000200))

04:16:39 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x400454ca, &(0x7f0000000000)=""/80)

04:16:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000b400, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  924.248943][   T26] audit: type=1804 audit(1582431398.628:483): pid=586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/967/bus" dev="sda1" ino=17697 res=1
04:16:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4008ae48, &(0x7f0000000200)="9b")

04:16:39 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe49e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xc050)

04:16:39 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x40049409, &(0x7f0000000000)=""/80)

04:16:39 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5422, &(0x7f0000000200))

[  924.422508][   T26] audit: type=1804 audit(1582431398.628:484): pid=586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/967/bus" dev="sda1" ino=17697 res=1
[  924.467076][  T823] FAULT_INJECTION: forcing a failure.
[  924.467076][  T823] name failslab, interval 1, probability 0, space 0, times 0
[  924.585159][  T823] CPU: 0 PID: 823 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0
[  924.593724][  T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  924.603805][  T823] Call Trace:
[  924.607144][  T823]  dump_stack+0x197/0x210
[  924.611538][  T823]  should_fail.cold+0x5/0xd
[  924.616115][  T823]  ? fault_create_debugfs_attr+0x140/0x140
[  924.621972][  T823]  ? ___might_sleep+0x163/0x2c0
[  924.626985][  T823]  __should_failslab+0xb7/0x100
[  924.631870][  T823]  should_failslab+0x9/0x14
[  924.636409][  T823]  kmem_cache_alloc_trace+0x2d3/0x790
[  924.641829][  T823]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  924.648114][  T823]  ? ns_capable_common+0x93/0x100
[  924.653197][  T823]  vt_do_kdgkb_ioctl+0x79/0xb50
[  924.658077][  T823]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  924.664354][  T823]  ? security_capable+0x95/0xc0
[  924.669245][  T823]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  924.675513][  T823]  ? ns_capable_common+0x93/0x100
[  924.680583][  T823]  vt_ioctl+0x47e/0x26c0
[  924.684872][  T823]  ? complete_change_console+0x3a0/0x3a0
[  924.690649][  T823]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  924.696512][  T823]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  924.702448][  T823]  ? tty_jobctrl_ioctl+0x50/0xd40
[  924.707523][  T823]  ? complete_change_console+0x3a0/0x3a0
[  924.713197][  T823]  tty_ioctl+0xa37/0x14f0
[  924.717561][  T823]  ? tty_vhangup+0x30/0x30
[  924.722020][  T823]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  924.729156][  T823]  ? do_vfs_ioctl+0x568/0x13b0
[  924.734057][  T823]  ? ioctl_file_clone+0x180/0x180
[  924.739203][  T823]  ? __fget_files+0x359/0x520
[  924.743962][  T823]  ? ksys_dup3+0x3e0/0x3e0
[  924.748438][  T823]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  924.754795][  T823]  ? fput_many+0x12c/0x1a0
[  924.759269][  T823]  ? tomoyo_file_ioctl+0x23/0x30
[  924.764233][  T823]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  924.770635][  T823]  ? security_file_ioctl+0x8d/0xc0
[  924.775773][  T823]  ? tty_vhangup+0x30/0x30
[  924.780238][  T823]  ksys_ioctl+0x123/0x180
[  924.784620][  T823]  __x64_sys_ioctl+0x73/0xb0
[  924.789256][  T823]  do_syscall_64+0xfa/0x790
[  924.793813][  T823]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  924.799984][  T823] RIP: 0033:0x45c429
[  924.804056][  T823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  924.823784][  T823] RSP: 002b:00007fd161a49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
04:16:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x400c6615, &(0x7f0000000200)="9b")

04:16:39 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', r3})

04:16:39 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5423, &(0x7f0000000200))

[  924.832759][  T823] RAX: ffffffffffffffda RBX: 00007fd161a4a6d4 RCX: 000000000045c429
[  924.840763][  T823] RDX: 0000000020000300 RSI: 0000000000004b49 RDI: 0000000000000004
[  924.848760][  T823] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  924.856757][  T823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  924.864749][  T823] R13: 0000000000000382 R14: 00000000004c5b0d R15: 0000000000000003
04:16:39 executing program 3 (fault-call:3 fault-nth:4):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

04:16:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40186366, &(0x7f0000000200)="9b")

04:16:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000cc02, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:40 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x40086602, &(0x7f0000000000)=""/80)

04:16:40 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5424, &(0x7f0000000200))

04:16:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4020940d, &(0x7f0000000200)="9b")

04:16:40 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

04:16:40 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4008ae48, &(0x7f0000000000)=""/80)

04:16:40 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000040)="7ab47d8417bcfc7045443b25792c3e1c578b2a0fc9d315d1d4ca5277125a47ade0f970a6358e8638b457efb9ba318dde0b6945b24ef6201db118f568faa37cdf6c8bda406b883627004d31e359075ffcea9106882b8318158b85c75f05da72b864d333dcac6d14b31eb6bf6b53b5981b18121897d614d30688bc2e")
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x101, 0x8, 0x7, 0x8}, 0x10)

04:16:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4020ae46, &(0x7f0000000200)="9b")

04:16:40 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x40186366, &(0x7f0000000000)=""/80)

04:16:40 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000d003, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:40 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x9d, 0xb, &(0x7f0000000000)="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"})

04:16:40 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5425, &(0x7f0000000200))

04:16:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4090ae82, &(0x7f0000000200)="9b")

04:16:40 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x2, &(0x7f0000000300)={0x0, "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"})

04:16:40 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x401c5820, &(0x7f0000000000)=""/80)

04:16:40 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5427, &(0x7f0000000200))

04:16:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8004ae98, &(0x7f0000000200)="9b")

04:16:41 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000da01, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:41 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x40207012, &(0x7f0000000000)=""/80)

04:16:41 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0xa, 0x6, 0x201}, 0x14}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200))
r2 = socket(0x40000000002, 0x3, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getpeername(r4, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80)
ioctl$TIOCL_PASTESEL(r3, 0x5412, &(0x7f0000000000))
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x4)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x18680, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
dup(r6)

04:16:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x10, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80086301, &(0x7f0000000200)="9b")

04:16:41 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5428, &(0x7f0000000200))

04:16:41 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4020940d, &(0x7f0000000000)=""/80)

04:16:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x227a, &(0x7f0000000300)={0x0, "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"})

04:16:41 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5429, &(0x7f0000000200))

04:16:41 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000e003, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8010aa02, &(0x7f0000000200)="9b")

04:16:41 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4048ae9b, &(0x7f0000000000)=""/80)

04:16:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x2285, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:41 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000000c0))
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=r2, @ANYBLOB="01000000000040000000100000004c0002800800090079050000130005003fde00000800040009000000080008001f00000008000400010000000800090003000000066d0000000024cc26d427b7233d000006000e004e23000008000600c80b0000"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80404519, &(0x7f0000000200)="9b")

04:16:41 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5437, &(0x7f0000000200))

04:16:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b2f, &(0x7f0000000300)={0x0, "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"})

04:16:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x41009432, &(0x7f0000000000)=""/80)

04:16:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc004500a, &(0x7f0000000200)="9b")

04:16:42 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000e801, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000))
r2 = dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/174, 0xae}], 0x4)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:42 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5441, &(0x7f0000000200))

04:16:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045878, &(0x7f0000000200)="9b")

04:16:42 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b30, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x80044942, &(0x7f0000000000)=""/80)

[  927.333934][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  927.333949][   T26] audit: type=1804 audit(1582431402.308:495): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/973/bus" dev="sda1" ino=17942 res=1
[  927.517933][   T26] audit: type=1804 audit(1582431402.308:496): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/973/bus" dev="sda1" ino=17942 res=1
04:16:42 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000fa03, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:42 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b31, &(0x7f0000000300)={0x0, "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"})

04:16:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x80045432, &(0x7f0000000000)=""/80)

04:16:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0xd77, 0x1, 0x855, 0x2, 0x8})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045878, &(0x7f0000000200)="9b")

04:16:42 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5450, &(0x7f0000000200))

04:16:42 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b32, &(0x7f0000000300)={0x0, "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"})

04:16:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x80045440, &(0x7f0000000000)=""/80)

[  927.875813][   T26] audit: type=1804 audit(1582431402.848:497): pid=2595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/974/bus" dev="sda1" ino=17941 res=1
04:16:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0189436, &(0x7f0000000200)="9b")

04:16:43 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5451, &(0x7f0000000200))

[  928.016169][   T26] audit: type=1804 audit(1582431402.858:498): pid=2595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/974/bus" dev="sda1" ino=17941 res=1
04:16:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
fstatfs(r2, &(0x7f0000000040)=""/238)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:43 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000fc03, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0205648, &(0x7f0000000200)="9b")

04:16:43 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b33, &(0x7f0000000300)={0x0, "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"})

04:16:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x80086301, &(0x7f0000000000)=""/80)

04:16:43 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200))

[  928.402595][   T26] audit: type=1804 audit(1582431403.378:499): pid=2838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/975/bus" dev="sda1" ino=16544 res=1
04:16:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc02064a4, &(0x7f0000000200)="9b")

[  928.537853][   T26] audit: type=1804 audit(1582431403.418:500): pid=2838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/975/bus" dev="sda1" ino=16544 res=1
04:16:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x80885659, &(0x7f0000000000)=""/80)

04:16:43 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x545d, &(0x7f0000000200))

04:16:43 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400000000fe03, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:43 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b34, &(0x7f0000000300)={0x0, "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"})

04:16:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x11, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x8, 0x10, r2, 0x83000000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0)

04:16:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc020660b, &(0x7f0000000200)="9b")

[  928.866495][   T26] audit: type=1804 audit(1582431403.848:501): pid=3072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/976/bus" dev="sda1" ino=16611 res=1
04:16:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xc0045878, &(0x7f0000000000)=""/80)

04:16:43 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b35, &(0x7f0000000300)={0x0, "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"})

04:16:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5460, &(0x7f0000000200))

[  928.977648][   T26] audit: type=1804 audit(1582431403.878:502): pid=3072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/976/bus" dev="sda1" ino=16611 res=1
04:16:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc03864bc, &(0x7f0000000200)="9b")

04:16:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xc0045878, &(0x7f0000000000)=""/80)

04:16:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f00000001c0)="875aa71afba3ccaa8fa1e3c8204563205c65ed486cf0982f3960cd90afa6ad8413f36c6a11d8a1270382e14215fac83b04c95c0cccf776ca30088f21c219d871d0b502e99a8b501529b76f51bcc68f1d3ebecbe9d9dbce17167ce1c58688b146547c5e66d6733f50d5eaa483db177bbd04ead46177a564cfaea2800122882200369f16fcfe5df09aa78a2db26c772b7d7d8d98fdb51e48b292f651c56d6efa654c1bb1fccb3df45303ab4a7c21f2e1bfdd")

04:16:44 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x54a1, &(0x7f0000000200))

04:16:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0506617, &(0x7f0000000200)="9b")

04:16:44 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b36, &(0x7f0000000300)={0x0, "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"})

04:16:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xc0189436, &(0x7f0000000000)=""/80)

04:16:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="9f59486c412c3bdd4bb43a9e6599de629b8b7c856387706e38aa13ec685f9df1996c9250220b439ee836790c9beac4f95e63921b677adf3db6f7ece3d1e043c232e2d44f05bd9eddfba918aa4b9f4303d90ae074c6416555049e402c6318722f3831c2fb721023eba6e2b34eab7c55ebd50b5f8cacdee878d005bc02cd98a7a1e20a1e31317e87427b64f0b00dc72b1b117d79664f6fa9dd84166e42032b0f64eb41edfd505305693db027af784f582f8be403a6da541fa0f34efcf92e878f4df8ee1b007d9d4af84330aeaa2b3836c512466416453219bacd1ff815ad", 0xdd, 0x810, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @default, @null]}, 0x48)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="5859751f676bdea718e3c9990155754ea3983b789f8bb8bfa7b35d63fdcfa03c63334c51f4089d60de7323475c41c4fe3cf8cd056816558419622c7cb71963bf6af98d8dc0fca90c88b79033bcd280d916ef044ef4f7c92cb8df22b170886ea0af94ae7947549fdab12dde1e9b8f90e2f04bd373181778e9c7f9223c1b4bd3364555964f", 0x84, 0x7fff)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000100)="5ebb258b8a5a7fbaec6395768b39d54d13f89b7d01cae0895b1dbaaa94982a0f73973e82df26ac234f0beb166c88761ac2fc9962d1cb8f814b9541a0cb4fefb3adb0b7278b08eae316011d2ff3005a0ee0185d8a72755aece609156104109b1bd0e8e234d2edb0896fc350645400bfdd1c895eeede2b9eed0b3a49901939e8e74ab4a622fc147642874b437c69198aefa300a45e5382e19deefcbfdc768ce5f5e8877de5cc0e7cdf2ddaa4f52ad1d305982d752b3d3bfc")

[  929.467148][   T26] audit: type=1804 audit(1582431404.448:503): pid=3312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/977/bus" dev="sda1" ino=16571 res=1
04:16:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5600, &(0x7f0000000200))

04:16:44 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b37, &(0x7f0000000300)={0x0, "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"})

04:16:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0a85320, &(0x7f0000000200)="9b")

04:16:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xc020660b, &(0x7f0000000000)=""/80)

04:16:44 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000040000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5601, &(0x7f0000000200))

04:16:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r2=>0x0, 0x3f, 0x0, 0x0, 0xa7, 0x8}, &(0x7f0000000040)=0x14)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8)

04:16:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xc0286404, &(0x7f0000000000)=""/80)

[  929.965486][   T26] audit: type=1804 audit(1582431404.938:504): pid=3550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/978/bus" dev="sda1" ino=17958 res=1
04:16:45 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b3a, &(0x7f0000000300)={0x0, "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"})

04:16:45 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5602, &(0x7f0000000200))

04:16:45 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000001000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0xc0e85667, &(0x7f0000000000)=""/80)

04:16:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000100))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x6, 0x200, 0x1})

04:16:45 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b3b, &(0x7f0000000300)={0x0, "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"})

04:16:45 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5603, &(0x7f0000000200))

04:16:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = socket(0x3f, 0x0, 0x4)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82000200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x2, 0x3, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10000}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x82}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x456082, 0x0)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040))

04:16:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000280)=""/97)

04:16:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x14, &(0x7f00000000c0)={r4}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={<r5=>r4, @in6={{0xa, 0x4e21, 0xff, @rand_addr="88f913fb5ee91d13bdce0f13ccb9a443", 0x5}}, 0x7f, 0x95, 0x400, 0x9, 0x20, 0xbcd, 0x80}, &(0x7f00000000c0)=0x9c)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r5, 0x8000}, &(0x7f0000000140)=0x8)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:45 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b3c, &(0x7f0000000300)={0x0, "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"})

04:16:45 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5605, &(0x7f0000000200))

04:16:45 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000002000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
setreuid(0x0, r2)
r3 = geteuid()
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
setresgid(0x0, r5, 0x0)
r6 = getgid()
setresgid(0x0, r6, 0x0)
getresgid(&(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0), &(0x7f0000000240))
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000300))
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = getgid()
r11 = getgid()
setresgid(0x0, r11, 0x0)
r12 = getgid()
setresgid(0x0, r12, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}, 0x2000)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x2, r3}], {}, [{0x8, 0x1, r4}, {0x8, 0x3, r5}, {0x8, 0x0, r6}, {0x8, 0x7, r7}, {0x8, 0x0, r8}, {0x8, 0x0, r9}, {0x8, 0x4, r10}, {0x8, 0x2, r11}, {0x8, 0x1, r12}, {0x8, 0x2, r13}], {0x10, 0x3}, {0x20, 0x7}}, 0x84, 0x0)

04:16:46 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b3d, &(0x7f0000000300)={0x0, "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"})

04:16:46 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5606, &(0x7f0000000200))

04:16:46 executing program 5:
r0 = syz_open_pts(0xffffffffffffffff, 0x149102)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/80)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4100, 0x0)
iopl(0x7)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

04:16:46 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b40, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:46 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000003000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:46 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5607, &(0x7f0000000200))

04:16:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r1, 0x5452, &(0x7f0000000040)="ea")
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x230, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x508}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x971}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e60}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3420}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5509}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x480000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x801}, 0x40000)

04:16:46 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b41, &(0x7f0000000300)={0x0, "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"})

04:16:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCGPTPEER(r1, 0x5441, 0x3)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/85)

04:16:46 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5608, &(0x7f0000000200))

04:16:46 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000004000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0x0, @raw_data="2f38f9d326e9b2790da94e2d85407e6ef49ea769e1ae7983e7e00c2d1ed3e16753b36f736e42cdc99b19851e4ca052647c811aaea87d5708e6f56650e2cce5ea57a52dba85f7287b0749dd96062992618a45b1e7933f321fa77d1bbf4625b44291e02172ca33a3cbab6c13ec7e9080c5a859b24b9dd27c41491edd795f0fe0ebaa5b31173f19a3c1ad06de1547f48e66b37562cfedb4c80be28ce16a50781c9637620355ef544dbce01c813cbe24de84fd120d0b5aba1ba2a68db8b56134207afebb4c20ff7f63aa"})
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = open(&(0x7f0000000340)='./file0\x00', 0x2d600, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4008641c, &(0x7f0000002c00)={r4, &(0x7f0000001c00)=""/4096})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={r4})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={r4, 0x2})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000000))
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r7 = getpid()
rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000000))
ptrace(0x10, r7)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r7, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r8=>r7, r5, 0x0, 0x2, &(0x7f0000000040)='\'\x00', 0xffffffffffffffff}, 0x30)
ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000000c0)=r8)

04:16:46 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b44, &(0x7f0000000300)={0x0, "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"})

04:16:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/69)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x6, 0x2, 0x8, 0x2, 0x10, "d8567b0782ed09bf4e165993f2d594f974f220"})
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

04:16:47 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5609, &(0x7f0000000200))

04:16:47 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b45, &(0x7f0000000300)={0x0, "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"})

04:16:47 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560a, &(0x7f0000000200))

04:16:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000080)="f9cded98e2d1619554b62ba0550290f300000000000000000000000000000000000000000000e8ffe0ee47ce8ab4e12cd7cf038cf1f302243553ce9d59b2aae8333587cdc9c50b4e51b1cad6b2b526cbc1aed0ccdd2a3caf20e175e95dd050f8a8793440a6d162addc5c9d44ea6d23dd28a860de62830fc7397eb0e947dc7d728d6999322abe3a114c819a289574c1d3325a25dc480800904dfe591b243dc6c12539ef27f867f30b32d198a01cbc61abe546a36032b34b81440204fe7d048a3f2701dcc9d901e4d6e77a312b78a843e4554c5dd1106a52932ab44999eba4758171a89c2815e50740006ace0233822f")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x5, 0x4})

04:16:47 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000005000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil], &(0x7f0000000040)=[0x1], &(0x7f0000000180), 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:47 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560b, &(0x7f0000000200))

04:16:47 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b46, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  932.569301][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  932.569319][   T26] audit: type=1804 audit(1582431407.548:514): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/983/bus" dev="sda1" ino=17950 res=1
04:16:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x27, 0xd, &(0x7f0000000000)="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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0xcc, 0x0, 0x1, 0x400000, 0x2, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0xcc}}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getpeername$packet(r8, &(0x7f0000000500)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x11, 0x800000003, 0x0)
bind(r12, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@ipv6_getnetconf={0x4c, 0x52, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8899}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_FORWARDING={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r14=>0x0}, &(0x7f0000000700)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14)
r16 = socket$netlink(0x10, 0x3, 0x0)
r17 = socket(0x11, 0x800000003, 0x0)
bind(r17, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r19}, @CGW_SRC_IF={0x8, 0x9, r18}]}, 0x24}}, 0x0)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x11, 0x800000003, 0x0)
bind(r21, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001800080000000000000000001d01000008000a00", @ANYRES32=r23, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r22, @ANYBLOB="5b8d9f564eec59f9ec4540b530eac284298c4d7bdab3531185850323a1d8ff2817bc422494e36535f641cd9bec94ffa4f66187396b3e2bd1f5c6b646071fc0c1a667247ce1f233d44d08e457cceebaedc6974ca83039f0efbcc2c6cfb953df6173fe992e6658aca0ddbf949800ff3bdc491a47acc35c846184a61fdeae090e508426683cb31b6edbd2a5e3"], 0x24}}, 0x0)
r24 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r24, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getpeername$packet(r24, &(0x7f00000007c0)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14)
r26 = socket$netlink(0x10, 0x3, 0x0)
r27 = socket(0x11, 0x800000003, 0x0)
bind(r27, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r28=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r26, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r28}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0)
r29 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r29, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
accept4$packet(r29, &(0x7f0000000b40)={0x11, 0x0, <r30=>0x0}, &(0x7f0000000b80)=0x14, 0x80400)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002380)=<r31=>0x0, &(0x7f00000023c0)=0x4)
r32 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r32, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockname(r32, &(0x7f0000003440)=@ll={0x11, 0x0, <r33=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000034c0)=0x80)
r34 = socket$netlink(0x10, 0x3, 0x0)
r35 = socket(0x11, 0x800000003, 0x0)
bind(r35, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r35, &(0x7f0000000040)={0x11, 0x0, <r36=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r37=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r34, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r37}, @CGW_SRC_IF={0x8, 0x9, r36}]}, 0x24}}, 0x0)
r38 = socket$netlink(0x10, 0x3, 0x0)
r39 = socket(0x11, 0x800000003, 0x0)
bind(r39, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r39, &(0x7f0000000040)={0x11, 0x0, <r40=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r41=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r38, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001800030a00000000000000001d01000008000a00", @ANYRES32=r41, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r40, @ANYBLOB="79e8e18860a53f158bd9174aa35ebdcde331aa66dcffc50d0fc2cf2223555cb5dc4ee2a6d33b067a55547c9df3ff13a0f0fd866ff54dad322a9a7c59aab4628af0a9d9d223540200efa58fca33cf7fba71abbfd1cb2419e096cb6c36fe4737e9fcd62fb8601a939596aadd5f77e0dfc20aad19e8dd10e9"], 0x24}}, 0x0)
r42 = socket$netlink(0x10, 0x3, 0x0)
r43 = socket(0x11, 0x800000003, 0x0)
bind(r43, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r43, &(0x7f0000000040)={0x11, 0x0, <r44=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r45=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r45}, @CGW_SRC_IF={0x8, 0x9, r44}]}, 0x24}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003940)={&(0x7f0000000bc0)={0x27c, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r44}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6000}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x17}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x0, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {}, {0x0, 0x4, r10}}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xa8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x36f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r28}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r30}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xc17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r33}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r13}}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:47 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560c, &(0x7f0000000200))

04:16:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0)
r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="a86f44b7a2d15579212e6ae4f74144abe0e2b642393da8549bed9c62b2c6a8a30d36f48877e0269f36718761e713006a0aded07fa5aaf34f65f4270ff93578f496d175ea13a7398b805e8656ff4aeca1719ee1df70a3", 0x56, 0x0)
r5 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r6 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
r7 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r10, 0x400, 0x0)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
keyctl$get_persistent(0x16, r11, r3)
preadv(r10, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/135, 0x96}], 0x1, 0x0)
fcntl$setlease(r10, 0x400, 0x2)
r12 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)="3a63a88c508e7a5dba5aede92cd43878a7a66fe21b7ccc390f8cf9ac5d8ca427efaa51db3cc7804298807a74aa1e06a1c98ee24b77295e0e19501a306e2000b7c2453234b4d3fbf5b97c43189f425ef37ada4c7ff2186554f280cba36b64e749d5674ea6301c6f087c2ba52ad1f7e0d5383e8a1083734b5de6e80e01e71a95c1e9ddf53434d8b445cbf80ceef7d011f1fac040f6d4578f01980a4509408df747c873b1ce4e6b8e0b061bb922", 0xac, r6)
keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r4, r12}, &(0x7f0000000300)=""/159, 0x9f, &(0x7f0000000400)={&(0x7f00000001c0)={'digest_null\x00'}, &(0x7f00000003c0)})
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:47 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b47, &(0x7f0000000300)={0x0, "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"})

04:16:48 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000006000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:48 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560d, &(0x7f0000000200))

04:16:48 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b48, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  933.174059][   T26] audit: type=1804 audit(1582431408.148:515): pid=5598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/984/bus" dev="sda1" ino=16588 res=1
04:16:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/70)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0x5, 0x8001, {<r4=>0xffffffffffffffff}, {}, 0x5, 0x4})
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x240540, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r7, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf251f00000034002280080007007f000000080007008a000000080003000400000008000600ff010000080007000400000008000700e1000000"], 0x48}}, 0x4000)
prctl$PR_SET_ENDIAN(0x14, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x40, 0x3, 0x8, 0x1f, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000080)}, 0xc004, 0x4, 0x2, 0x7, 0x1000, 0x9, 0x1}, r4, 0xe, r5, 0x3)

04:16:48 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x0, 0x81, 0x0, 0x7}, 'syz0\x00', 0x44})
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

[  933.273896][   T26] audit: type=1804 audit(1582431408.148:516): pid=5598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/984/bus" dev="sda1" ino=16588 res=1
04:16:48 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560e, &(0x7f0000000200))

04:16:48 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000007000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:48 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b4a, &(0x7f0000000300)={0x0, "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"})

[  933.685371][   T26] audit: type=1804 audit(1582431408.658:517): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/985/bus" dev="sda1" ino=17935 res=1
04:16:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000180), &(0x7f0000000340)=0x4)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x4)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/333], 0x4c}, 0x1, 0x0, 0x0, 0x2400405c}, 0x10)

04:16:48 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b4b, &(0x7f0000000300)={0x0, "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"})

04:16:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x202001, 0x0)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x7ff, 0x8000, 0x1})
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/77)

[  933.809342][   T26] audit: type=1804 audit(1582431408.658:518): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/985/bus" dev="sda1" ino=17935 res=1
04:16:48 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000008000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:48 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r2 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x8200)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0)
r5 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r6 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
r7 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x0)
r8 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="80396521501ef8d3479e24dd024a179d628c649e498f9aa4f9046da76ff219cb9df2b2197c8a3b412c2cf7424413049952378083a6d0d52dd502469e9b7d9e01befc0a30d78941b7eb49910ed019b6a54ef856b5aa667ecfa0f9e4fc3f57a792659cf9594b890bcfb6c38d4ed613f3f6e9a35b46bddd07c165c07661f1137e27ddad80982e0dc6efcaa47e678f1abe1f2f44c36d243387e54c4851b1f4ac8535547aee73", 0xa4, r6)
r9 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
r10 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\b', 0x1, 0xfffffffffffffffb)
r11 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\b', 0x29a, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r9, r10, r11, 0x0)
r12 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='user]cgroup\x00', r9)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r8, r12}, &(0x7f0000000280)=""/206, 0xce, &(0x7f00000004c0)={&(0x7f0000000380)={'tgr160-generic\x00'}, &(0x7f00000003c0)="e53091339df70530dff880ffc5cb9e0c3aba7d5ea479b15f26a7fd1575de7fad4d08b076c2977f59fbbbfdff744f8b4fde918eccbb42e997e56310f1a78adcaef7e915bdbaa9425399fac410f37ac3168e2998ad62743b1cbd3151b3ff4a7cd7567e5d65bb2c268f4e0c933c0263b0d12abf61412ed9fb17c649bad7a6cbe50479ea46087abc3282db17bf9512b8b077c5c8888cb74816ad37e47e09de21f1f6a0d5c0afa6a000fb5f3043bc4be6e29ea8e0ed5d6a3ee2ddd9df22f4418f266baf0f6a78", 0xc4})
r13 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r14 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r15 = dup3(r13, r14, 0x0)
ioctl$EVIOCGMTSLOTS(r15, 0x8040450a, &(0x7f0000000500))

04:16:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyprintk\x00', 0x0, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000280)={0x1, 0xc6, 0xff, 0x4, 0x7f, "65496d282202feadf9298036e0d63d4789cc90", 0x3, 0x7fffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="a7b500001b0000000b0b0286018c8b038b03878d010f050f8e0b02088309800684860b374903bfe97082c29a62cfa928a88e7a798062af25109599729317216c243bdc46"])
getgid()
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/240, &(0x7f0000000200)=0xf0)

04:16:49 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b4c, &(0x7f0000000300)={0x0, "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"})

[  934.129527][   T26] audit: type=1804 audit(1582431409.108:519): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/986/bus" dev="sda1" ino=16544 res=1
[  934.246970][   T26] audit: type=1804 audit(1582431409.148:520): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/986/bus" dev="sda1" ino=16544 res=1
04:16:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r1, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000140)={0x3f, 0x7, 0x5, {0xfffffff7, 0x1}, 0x8, 0x101})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
creat(&(0x7f00000001c0)='./file0\x00', 0x4)
fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
rt_tgsigqueueinfo(r1, r4, 0x2c, &(0x7f0000000040)={0x5, 0x8000, 0x80000000})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/170)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), 0x4)

04:16:49 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x560f, &(0x7f0000000200))

04:16:49 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b4d, &(0x7f0000000300)={0x0, "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"})

04:16:49 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000010000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:49 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/72)

04:16:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0x4147, 0x0)
r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r6)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x5, 0x5, 0x4, 0x20000, 0x0, {r1, r2/1000+30000}, {0x5, 0x2, 0x2, 0x1, 0x80, 0x81, "d866e268"}, 0x4, 0x3, @fd=r6, 0x40000, 0x0, <r7=>r0})
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={<r8=>0x0, 0x4, 0x20, 0x80}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={r8, 0xb0, &(0x7f0000000140)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x401, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @loopback}, 0x400}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x177168ad, @local, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xffffffff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10)

[  934.746945][   T26] audit: type=1804 audit(1582431409.718:521): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/987/bus" dev="sda1" ino=16548 res=1
04:16:49 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b4e, &(0x7f0000000300)={0x0, "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"})

04:16:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0x20800, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000001a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f0000000540)={0x149c, 0x13, 0x2, 0x70bd2d, 0x25dfdbff, {0x5, 0xa5, 0x4, 0x4, {0x4e24, 0x4e20, [0x401, 0x7, 0x6, 0x8], [0x1113, 0x5, 0xfffffffa, 0x8], r6, [0x7fffffff, 0x6]}, 0x696, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "d746e3420964b504a21d76f67911582535e826e1efb5db059e19e5ab06e413b1b7ca8badfd2c08a89d4741aec712fc87a46fd9e2c7feeea61c8ca051c41a9de3f04c0d3dea3e27ca45ebb8176da9d79c6f79cb2388e0b70f71713a3e4950c5c04becce9aba460913fd11d642e6a5738e4b642be61336e8873abccb7669cc5a1f692b7b578cac851b49e310989ac18ebfe2017573e04f73c1285d42b6"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "589dcb54973b02f380a3c73afb8c146c2024857b40bfa8ffc68647d39abba287a01a263e344723063430cee172419f76d6436277dab3954c1f654f345f8d267d5d68b12611313b8cc3b7df6eea634d48d92e9ea073535800be30e153ff3a0937487da4825b35049a0b7f34a76338b443307acdfa01b3c3f8f08d375ebbda296049e2917713adcf991606d359a1e60e7020f17ed449"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "efb7e90f06734c0b3d95b44829bcd4f6776826733e702d6fab2e0b4ba3030c2f2c054e1a980f29dd274fce3f0f651b355c9dc56e65065507bd66fa4cf8ca31e771165db8f9de691ee9736e7fa8846d39d656724555455c201134061cc11c2d180d8e679a1d33408a1ada0dfd1eccfeef5762b38f7fb79071f2b7a791a5fbf6df6ccb99d33e41364516633c18167f8eaf35bead537b06a8f8c416cbcb0f99db49f1a6fc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "f7c2a593c429b60c3bd095bd7978d71a9b2b2f0b01adddb4d4fe56c39565d1111f90e9601ea358eb9f3ae0f18afe09f33528597b603807b987ffafb7ae895218eb51da7806ed63eec5cb7a9bdcb377085d4d58013a722a84d580cfe0d9fb41b702a2ccfa15c640bd143b49c27d8dc165985aca5dbd4ad1f9133f6d56807a9125afd129c19a7d1e88523a364179ffdeb82deee824bb6c00490d548ffa1203820f6504418da69244e3f8bbcd91dca5670d908ffb20fa4988d6ba46bf5392309b48db7af2d4d98ad6efa9fde06541bb21412a4c7f375c164eb417ae9f5d1972d77a05b5b967e8e19c53fb16fefe25556d2e9d9df9e48ce85b095527d8ced292557edf60aedca8339dd8b189fd407766859db11f20e849812920dbe466ee5a45cd6f569d1eb0afc8e8d940e86b76e81be012d1c790afe66577f2a641c2800cb13c3e3b592e8eac2f1979fa277586fa10012ccc809efadd5621c27beb48d7048ed9883999d91cb81ae015e722c8a90f779cb50a5ba28b2bf71940f81d73924021101d9b9df5d6dcf2f13432c8839dd04d7492d973ca194fd2dcda627b9b80240b76f166fd87ff2b8ec5a12f1bc4b0eb90d7cbf6dedf2c4c4982fbcd08c141dde7e3fdc2d9b9b8f4f0c0f0fd2d842f8002dbca54261ef6e108b6dc3dc495ef8f1ee370106a5ce5529272ec7a8613a5b3212f3d7451ae8399cf52b2b1b30fdc67433fe09c1d457d52c6bfb17c9a7d1d2bf3a48a85fb22cb09c1412b3f4ba73181018160abaf3eede638d88cd36a631e7fcb378416e74219a78f35b3731427adad2e31434feadd0f3e959b36a0fabdc829047553090768c869f521c075c62bfbbc2400f8ef7214632393635d9311a9c250dca974b369a4dac996cfb4133ee65d0ee189bb45f3bbc12f83e2b97bd80ffe9049154645f519550ee3ac7934e27f312622665fe4b3ecd006b2c1a1a5dd1778339b13d33fbffec27155129a21fffc9dac2d48d96ec3d9f5f38d07963716ca3fcf9e4d7c588c367602c6ead4306a8305aa11278b9c7de8b973ff90081773050fee6dd7105ef88f175152db7f41098026a935309542b6df5415ddb24b6d7e44ec82cf51d06f973d3fc6da9c79f83bee0f4ec73b7f0477cffb55e0b0ea291fb1e8eca243acac2ae69b0335edef3a72c77c9156463d3acf4e2bfa43e330c971124c021a5ccfe148ce6af8999ff05e78c98f5b7e8354b3b7e311fc06ced2497306a36241c2b2180f5a5de44cb33e41fa0003081d4cff11d21954a3b170109d7eb5ce78eff35a82d5a3a126a67689fb3d581bafcc87519f7483c685285da7a1aa687a42284f32e083aec92727743d8deeb51c060d234c6d18dbb7dc516afabdeaa80c1548e25235114f05ed0dceffb4aaa90a61dfbce91a4d631269f3fa1d9cb30754521ea400ff6696378b50d9f384b2f4291b655f3e0de6f8baa617f40a9b05ba6cb68100277421e32c9e97d880532fc022d366cd13a9284f323086cb99a67d6b6e1129918fa6226db0040bbceeafbf0f4007cf1354160810392d762167764e187a9dc193bb8ee853e7fa4df594e4d94e7a9042fbf8ec26c52030b74b1b8bdb96f483ff090850d682ecd23d320d1ef1a488a5e3a26d6156fc4196bcd987a8a4187fcf3fa263e654ebc0e3d864e324c52b63fcaa3343455fe4e237c2dc1683b8068220251f9058083cedbca6e8d36dcda5259f42203ea4f5e6d15d8a85084e36b005f9af81d6b612f3a54eac067e39a347b6ed9f032746f0d27e88cfc749d8c3a93954762601de33a371f5156d2fff1ce52e76b97e88b4eb379de94cf17fd09c2b27c42e399efe0ca86910b9b2160a97a36699ff5b6feb4e17d6baa62e10961e6e8fc121e325a0df9f51f81b5bfb042a82158038b52d0d8edbe0b09414d362b4cffeaedfe0714da620628b08f66271f674c1afce57d6716e3d69c5ad99631329c5d149e1136a902a668cfbcd31435779eae5bbbf7f0d7f20d1d7cd83285c2dd0da912ae9904e9848f1007684ac14f97021aad5167cdd333580e603c7092e5536112e7d5879148b13c9dd7bd6b33b8f4c486101a37ad3483b1938f48a7831467470076761f5384eff52cb1e11c8c6024f3ab82245af93a8cf669657bebca4fdee71c0a5e1fa86fdea92f924fe58c28731df5806dbc8c57562f9289952bd0ed967962756c6eb5f0c62b55ec55e897f6d86b83134e87ba6b7d9c385ba7bb36f00b2a4b9af7b5190803a5304e488a5e3ba3f29cf6f7d0afe7203f20945f338f7af0b7ed5342539b594a3c567318a88988656deea630e1eee584560c6797f1391682c622b42b0f6cbf8549adc009d2ded92d34b993816f5bc93e05c9713c667d8c1c3e8fb0e4d4f2530edd0d5e38a72d71c3c11e1603d3da757a9811f7698eb226212ebbf6b69d10bc5861c7a34f95ced08a4b0a1717951663b5133fa94c6f23e162641cb610aabcaaaca28ec7627979722ebfc16eb09cf578f4b40e987f798716b1bce0af8c5a895e894904a6fbca2e06929516e6ad8243fe6e2ccc9bb0115dc7a8eb3ff7e266c20cdb24fb5ce81252adb7e8d356a77049055f33412e84a67d8b61e8bb1e1b6be31b8ab7f1231c1faed1348699158b3a3978053b8dcd4abd27ea663797d45957ee8321575e71fb3223713943af58eb3aeeea0cc41afb422095934b17ea3199cad1cfa00ae717f2b961e290c92fc2a9e1fe11a0f2b54822faec40b00630dba1c3c969c323154b26ec26b0244d86934c47b5cb30cce806af75ed58beb3bbfc141af8b4d770b0d286dfb5d19d7d39b8ec23f427a03efe128cd5d7016cd76fa8384e3e190a1dd2ec7c60a49b7000bfc8be0182bea7ba2f6709e83c567fc7c26ff7b57679f814bb76d330b92e28cc5a32075a2dbca687b931178eaf7177a58cfc7e4edb052b0bf47a06e3ca428c3efb4a3f8f9b55ce7eb444047b36c9e4c86f49660b05390a7be5224b1106a27f0d7aef7904967011e42d6d0ee65f7db85080f735339a082134cdddb2c6d59af86bc7f590e5af44b2b3e0e3adcc1fb9faabc90bb7a13ba51562a060e3ea277dfede3b38b954264f6be8669ed339b96d0cdc542777c2ea01b6e140fdd2812680434cfd28ac41aae998e3b7747eb66717681190d8e6e790f007973ff0bf390e42b6ad59ecde02f08d0ae3e848d3cfe63897c03164b848e379715e0f07f56bbef436267ae11784176c2ec38f1f52e9ecb0d9ffc1a49da054818bb518580e2759f0178dedd643d22af1021a0c25059566ea4cd4c310cf2816862e7e3af8d6e65f29cc81cc948184a280286aa540e92ad53ca6a8f51bf4fc3a47f85d4616bd7ded6589a6271fd66b73f9ed191454abc237b86f6fbcf73a02531fc9169b19272cfce212df373e897921f824edc08def009e8e762853ba5c62f28a69ae10d9060069d7a2ddf2607c00b68ad85691350751758966b9fc4694ac6fb1075d0b82ae720aede3a5f1ef51a14aff3d44ae8bbafa6b9cc7db1156709ad4cc40f755a2a6a237a06b077a8c03c5c1adb41292822154cc496aa0def3b7afc29087f1fbdb0235a27701c782db56b66a946c26a62202e1bc6f0a66f22cb4d0edda9f441eb5fb799a10fe60931dec536b954e63cbc7cdeb7018b3d37a01e14c870261c2ec92f4bb66f457868daf44c35fb6b51c90b7deade7cc012c29f4e2cfadbcae0b4711a19dc6454d6661a31d77aae1f217b44ffef9c46d3d4c161ed55cd57c1ea89fe79554f05084b991b45167bf09a78257b297d6ae64879fcba58d548e4cf41967d761b9432acd71729339f7b8c1092df215444cca5ea00217686b8139b106bd88dc560e03f496d199655b2b2c719524ca0a68fdffc33e649d2712ebb96c23fb125152909553f89fd0a24c2fdf878021eb036ec65c224c2413223d4f7ae7006473866c48c2bb2795d99847edff3e88fe80df04bb92af5355eefaae30b81175bd2478b32961ffabf79f9e6e6fca86be46b89d6c528102329f3979f58d43633c8e647af0dc2e36b61db05804e1c981e64a0bb052eaf40eb488fb45f8383cc114b42496238da22de28c1d4178fa2bcc803d1a9a0b9e5e90450f0b0f43720936971a7fb27748e9ebeb2b2269e1004de7862add958cfc4f4d3557da60ec67eded87d27b2e98f7006af644245d3a2fd4a6a7995a510246e5f9c3b29d678f743fa11e4f34af9331b24404d721fdc3ef7b16ca1b12349e8dc6635443d8d367be4ae598304df13765d0029275a316a034e3de49f4790151e12f1b8c5c4a2d153eaa4935a10ae103d8ae0ef03e949f22e3ca534d91997ad7e1c2396513ec6e34b79f069b84712f411fa97655454530abe92fe5661438df631ec639dacd5e0029432c0b7e13f96f3f9402fc19ad1b4d4fc72b0775df0085cfcd2598e795017807d7725173e2251de5f561f5d6376441fc52cca8f7bae62777dffcac94d4a8c21266c4bb009ee3161395af4cf0d82cf752af1747aa52e24d9df761adbf652d03a67802bfaa72bdd240e3e0a6c3b2f71f243c2ea2fa189a59dc70b311972049171ce7ec72a1febb0beed88c23502555aaef3a5631c8d29f2399679eef902ae6075aa95b99bf5a02a7999ede5b2cf6083a3b26b7e267efe2d5c7e5ca67926e2b206b2e81d7f7a1cbeabaa50bec9cfeef8414cdffa36727c65f3dde375e0117a700106c94c110d66def88ebd6590b0e7937996139342b559eea2d40d2e7eae26c682c554553e078758b700872ced9ab7f9a2008cabc3d592768359bc64f203ccf488cbabe3b6bf9557cce92784d3eb12d495607160b4004b139d988a4b55bb5320282b47432561c239940e9cfa8a424731721eced8301c92c5f78a4a7e1ec3a522274a61253d60eddd319cc3e27bb7fbd31e57ff9e8f9b63300bd34f2a52fcf08ef4760fd33672ebebde78e9ea59da461c20148b46cafcc98b69a3d78d1326b34a92ce860fd4c4885067c83537a1ab284d7079880e1b49cff8fa3d8dc03a2f756e49229043fc4e31e8bdcd850b0bbc6cb65504fd5397141f2de21a0aecf9f2a667f08546f1de2abd76980e0224c2533056aff9b736edc230b0c7d5f4f2aace3e1e0e5d456c1646956d6400d43655d9e090cad00339f486979d77c9f13ff2b23d884d8da52006d384a2b40e39ac67dc4cbf23c570dfbdd05742d5e90cbed511b1f6200e50da18fc134024972fef9fa90f5edfbb2a9da568efb96b81723aa660234ac5a5de86b96fb386bf37b90b18f078791e9afad9822e694ada03f5515bcbcf7c51967d17ddb2ec428f61f3ac8ec9410f5421409e4fe4d46268de42b238a36768428c603c4fb92d2ac5c498a79b95f52975844301b503e86230dee2112ef47c63b5f1a483b64626f3073847fafc6aa168b10c0cc0e585f4ceafc9fe9e7d0f4ddd84d3cc287383c5de1a6bdd40ef4f4d555a95e8637e081cf70c12fdfb2671b3a50144b2532c8eeca949b4bba6c10a51e2d07adc6bea1574f2ebc1a64e5d388ce743b2ed82b411444348c887ba0fe0ab7fd42c87dc928238788097831abee24c4ec6ed1181ec24af4fd1924f9d6fbda52b8c33a2939072ebb51432c6ae9ec56f9124341068a52cc1a6b9f3ad60d45e59c54b5251a25b4be537df7b9bab0fe5e40045c97db198178535330187c93c6ea064ddc2f7321828c58ada19ac4868e2ea6a3b9b646600111e697005d8cdf57fd4da8610659058e27e24b40f42b66a41b71d73d6a98062a2e119fff3c05dc829c79bbbb590341e197631c756639af6ecf996dfc0e04232d071d34799b35779c42b6ef2101996"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "f9f067a39adf23e1a4bd28075884bf414a9ea74ebf241f8953ce9cfb86e7e7d775f5d637789b0461bed8ba1bfd32bf70cdb20bc9efe1eb41068597d43e275d52b581acb6479b041b1e660650f8d18682bb456dee39fb487d23ff441dd47625c585f96baddbb488d19fb9da25df50b5e9681c877e563a61276d04ee3cca396faa339f1212e6a753f0725776e0ee9945192803885ba508c5b6a93a81ef5a5b1f40c05ddaee65c0732d9d0f2e2b68e9220a094bf27740c92565390acfefcb8aeae33f7e2d18c9998065971f000c693d5b6e1b5aa6e2bad6b76eaf2baecbecbb1df4441c2998a6193238cc6de60b5b0692ba03"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "1f5f2f270633d9b18a4cebfbe12c6efb524c694f5268d4f31a9895865ccd0f6467e259c010698962a252789224b27415c40c0a14c3ef8e1f2ed1716077a029a81121a45eafeaadfbbe0e4bc259a774b5b7697a085cb258933b93a5d1f90ba231ec7f9c6e234705e4837ee2b621943a40fbd1508d31c61e2be06b4703bd90ac2f653d89ce4f18ca125c38c65413669aed4fa9221533801201f6654280be91bbd3dbcc05daaf586f31c933e6e5d4aa6bf5d738955e313f2b"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "19f2f316c12d811ae07d1be8b8a711620965fe35cede379095847d984314dc87de15ecd107f36ae54349b9f71a2a408be300a034204842340120bda5bd818bcafc83db296ae595ac95361f3f036bd34ea237e81c855f41466fa3df8957426acfbbb37f60e3a54cce771de435d003d63e7a41e50de744fca12a687c23001ba25a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "238bf4b7e483c9c85e590e7fea88545474cf833147ae15880fedc79a84cf4e8eb7178a34498d2cfa486bd9"}]}, 0x149c}, 0x1, 0x0, 0x0, 0x4000041}, 0x42000)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x1, 0x7, 0x800, 0xcea, 0x5, "7e3b00df61ffbe4d6c0e6a2c5e66e161cfca0c", 0x9, 0x5})
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x143a00, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006, 0x7}]}, 0x10)
sendmsg$sock(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="0ee7d724f9d777997c3be2c86b363664b22619e43d744b7168d69585d01aed61b9fe30591851929ba239ab9396154b49113fb10f5594ee1af23226c7bea12530d4d0359386a73cf5c5a6b5df0082fda56153667846dfcfb10dab8fe4f9e70115e2086333fbf8e2c1d8ade087f3275598e966a83df4ad3e5f4986980bb4c9abc6cc51d428ecb559e57b5f934ec02c0732a14e999948a1622b48f48fd461bdce82168232d66cc8ebe7b1777694b1e057360fb786ab072d42652abf1002557ff9917cdaa8cae6718ef6be6cc2ad256a2faad7a6fc760164a6c9adc57f31", 0xdc}, {&(0x7f00000001c0)="5fc60923eef1fbe693958c5fe8dfa6fdc534e52e8872413eff6d2cdd26dfdb2b3d9ab6360e3a556a577b6e9969d2b2139ad11d54bb69a07718142c24b40c756c501eb7fd1928712f6362239f396cbd0c5b0662f3f2a875a9a2eefc", 0x5b}, {&(0x7f0000000240)="bb1a2a482af0923e87a82373d729904714bc606b14027c9aa47052644ad74f0411e6178fa3ed36840c27266093f71239f2f5121c0422aa5c96c61035aca43faa95ea0cc334a8a9df466daa50ed731e6b4bfffda56481ddc850f18ae32a58fbc3dfccf18b1765b6d38c00bad7072284ce1048e26939fa5649a8a28e2ca2fdcd10271180bf619cfac3cd859fe86b41d70581fc56e281cde285b153cb1812f1960fd18a0b2302dcb169bc5e604ec6efd6be87b4efc8de3de8f128114af624", 0xbd}, {&(0x7f0000000300)="8dba38ad38abba46a7c89011bc40c6cab954924688c87477d1965f81151f632c8a09eca4789aa00dcabcb24a8cae6307da61551a989fe01bd36740015e6d02065100a14190bb97ee", 0x48}], 0x4, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xc2fb}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x10003}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}, 0x1)
openat(r8, &(0x7f0000000080)='./file0\x00', 0x402, 0x40)

[  934.915917][   T26] audit: type=1804 audit(1582431409.778:522): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/987/bus" dev="sda1" ino=16548 res=1
04:16:49 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5d54, &(0x7f0000000200))

04:16:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0)
ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0))
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0xd, &(0x7f0000000240)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc)
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000180))
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x508040, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48000104}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000c1410002bbd700050ffdbdf25080001000000060008000300000000000800010000000000080003000100000008000100a7e148041c4dbb000000000800010002000000bd8426b97dfa640f324cf2d2164e303aec2270df686ead397a2a5afa4e9f15e5a3bdafe086353275fb0453397fabd055b225a0845edc3930c38d53a0366dfd327bda607152c1cf0f942b5a2309334f74cbc1a76c4a0255ec9351caae0691e7"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:50 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b52, &(0x7f0000000300)={0x0, "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"})

04:16:50 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000011000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:50 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x604b, &(0x7f0000000200))

04:16:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockname$l2tp6(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x20)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x3ffffffffffff13, 0x0)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=<r7=>0x0)
fcntl$setown(r2, 0x8, r7)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a5010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000010000000"], 0x14}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x24000044)

[  935.345830][   T26] audit: type=1804 audit(1582431410.318:523): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/988/bus" dev="sda1" ino=16544 res=1
04:16:50 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b60, &(0x7f0000000300)={0x0, "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"})

04:16:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000080)={0x9564, 0x2, 0x1000})

04:16:50 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6054, &(0x7f0000000200))

04:16:50 executing program 1:
ioctl$PIO_FONT(0xffffffffffffffff, 0x5452, &(0x7f0000000200)="9b")

04:16:50 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000020000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:50 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x3f)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200))

04:16:50 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b61, &(0x7f0000000300)={0x0, "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"})

04:16:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000020c19e424610bee9"], 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="14012cbd7000fedbdf25050000001400098008000200ff0f000008000100ff010000100006800800010007000000040002006800058008000100657468001400028008000100150000000800014399000000080001006574680008000100756470002c000280080001000f00000008000400010000000800040001040000080004000100010000000300190000000c00028071fd0300f76d0000"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x48000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/80)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r4, 0x5412, &(0x7f0000000000))
ioctl$TIOCGPTPEER(r4, 0x5441, 0x1)

04:16:50 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x614b, &(0x7f0000000200))

04:16:50 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x624b, &(0x7f0000000200))

04:16:51 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b62, &(0x7f0000000300)={0x0, "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"})

04:16:51 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000040000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:51 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f00000000c0)="102769594af46c5fdb069d1ecd9a6700")

04:16:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], 0x401, 0x0, [], 0x9, 0x1})

04:16:51 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x5, 0x3f, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0xfffffe01, [], @ptr=0x2}})
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x634b, &(0x7f0000000200))

04:16:51 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b63, &(0x7f0000000300)={0x0, "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"})

04:16:51 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x7fc, 0x223c, 0x36, 0xfffffffffffffffc, 0x7, 0x6, 0x0, 0x100000000008000, 0xffffffffffffff03, 0x101, 0xffffffffffffffff, 0x5, 0x80, 0x0, 0x9, 0x2008a3], 0x4, 0x80400})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001180)='/dev/nvram\x00', 0x100, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000011c0)={0xfb, 0x1})
sendto$unix(r0, &(0x7f0000000100)="f99f8d44b4d5432b9266b0bc771970eba4be2ebc9b941954a321ad5383873dcb1e7396d08a221e6c4193fe050d1b0d6f3abe5c5d82bc6af05567f2cade0fc427c12cdd0325bea8bc7dbf60b4619a7d8a004d975b23d7f6825804b429bc2b5b87f3f52dc32578326ea53220e34e7501f465c4a1ffc566a924f165170d3027cf7d0a0152fb7b52994971ce81afce65fa4f439d92076762dbdfc87800fce04e8cc3496a802bea7d3d4e34e72ad491c564e299716a90db8936cd6daf93cc965ede7b93ba9b2f82313808bd1e4a83eedd582ee232e7b719999f3919870546a9254aa287569449bf147f48f531f0de30b82322d5aa5dbe39e0b7181759d534cc27139d39da42cbc5f15e6dfad55e350efb7a696773738c1ac6de1f15d6824539bcdbe392785e5f32c73eaa77f07c7fc201159b5d2fa47c8436d27ff8748b6316357d67b92e2bbb39895a88bac6fd8c31df4a678d56be2bc014428527ff7f93586cd72a991d1c24ecce832eb1ed9d70ecf3da0cea980ffe0d915e8aaf74486d24ed7198222eb020d90b4722286740dfdfa421fd35e10a05f9332dbf6b5d866e88dbf50eb138b507ffe7af134717c0b515dc126fda320fbd6c1e8a7c7c5bfd624399891fc05a5ea4a1ca9e4caf00083d82839a754f4c41a09341f0968f789ac49715944f0306b7d48031cb7602ab91678cbee290f9ea92a091905786dca30dc61106291a0ba50496ec60ce14a6b52295cbab69afb308acc856e36b45d173d43113b32d4f80fa46b97df59b9264b201a585a45b0d64fd43d99361a310dc6f4b03f3ce6f3ed4683c9a15790c796e2f3d2df98c95bb430c551549b6d28d36d90c27132f0944071b9a7300033fd4ebd7bbf6adc9577be8c7d9b7b90622274f5e4021f82abef98081699a212bfea01ead7a5589325dab577e8c33dc43fb9c891b311eefa3cce22a13e42fc3a2f0ab7ecb12e8090565f65b4893d8def56a0818fb407de07164056507f535359f8d30ae9d3f4bd8448eeee46159240b4aee8fb1c70e38645201a477a148bdf22c8a61651027682a9264d8ed950e1e365b1093ee02a771b618822bfb79167d1ecedf8b6e07789e8c76e9c38b7535e01f232e3bc33a82b9f4aa26fd694f382ffa8eec28641bf6c20e6be20f8168b15f521d2eb51a69f8aacbcf46e263f84703ed12aa9842cd4e7bbb17f044e83226767bcd9223d343630a550d2acf9586d81a07a723cd63940e1a228d9871b87aa7b439df2355aa6e1cf5b288aceaf447260b7ff7b09917cbde02220dc51b2825fdeed1f3aaf614a911908a069916d9823ac5bc37ccb66387a863fd3a0a5939e83fa544052717aafd5f6a54e030fe14776d80a762231cf5b56c2d70bb7e4e9e740602c794293ca4f60b633949ddb11d9481332f526d17f7f2a7eddd854f378581a741f120ecf5beec7faf4320a11510a29d0d06e66f57abafb7bd4ec8885c5e0a36829ba84b5ce76b69bc381595a91dea1ad7aabd6fde3ccb77043d8e207549aaefcb70eb257ba0fedf8ed7a3bbe516393c32901d933160acd18469ad603fccf699d8934499873c4f936082e531fceaedc813d64ae238d9f6d92fb5bfbcded8424e2efe72edf44137c622cd4fdd196bfe3324a9d5728807ac13a2990e9510e83720ba6d22088d0962ced2d1914b9a8464bf1367de6d182552d70a1d20c1dd232e97837b8fc4028f6faebc92077e1174d35c3fa884da13ef66f40c34ac5c18c6ed2f2786c989737a36d764572eb4fed0080f272ec53447ea1e4c949696f4342fa9c85e762beff73228109691a9687a4b6ab16ae4e1cb6bc1d1d588b5a917fd5ea47b7c0370ee8753ec2c982eb3ceed63533f6b2228d9fafa26b74200c6037a0b760e2622994d21a64a04db573f3297179268e2f8fb4c8a8cc8670a213b7ba87b2558728ea1b18233081e879debd95bb9e373b7a773cf088eb5ee1fd66ba8bd711fcee8360585a5725bafcdd9dbbc252d107249bcea9b521038f9d48eaf5e5f811c5e8642d78a8cf2ff57df72e0f0f9092f3b0dcc18ba4a5a58dd8ae9c2d634ccaada3ae1fa02405c895c2c1747f05763fb499f2b9f5d27979e89d14a2b78368c1c87951fccd985810c5ca794e0965060edf9ae1e3763a03f5939fa721c4add23cdf6e01ad9bb49f0fbafd79a30acceb7696e859542e1527edb8c0ed09c03a1638a0ff6700bf97668203b2968e5a82b75cb2422de278ce43dc0199d54ad016c62695506ff4b657df1058af08bde77200f8daa3e788fb044134d38e161a777b818bfd45902e4f10b770b77ab2ac2508c4a18335e58fdf95d32ebc66d5025473766ef650e60f3d0b774f77126356c15c5a78cf778a6a6e4c271e960ed5bf95106d01cdbe334e1653c50efc6d17849947598bd4fefa4d509eb39c484c08cd220bdefa308cf52669ff79aeeb85f6f1bbec02295beb185c332db3636b812ebd325c99ab22a471119939e5f5dc057202744e435bf41306a9155e03195aef6b52af17e8880a767d026c46d030d2b0a8bbeb7ce42e3e15ebe87f2e19bc705ccf85c0dcffc4fedea145a4471c12d971e164fae7874bfcab87a4a1fe9dc5d2d70d5c5fe6e18a4f2abec689a071a142471cc09abd174719084cb34934f9c3d9a21878012a7cad7eb21696786e26d23e4ca8bca21c222ca29b83bce4fb3dc4c932d5441bfaf31c59437ce47854c495f84f4201e13ab8aa65b873739edcade2b3a71ed39e6203cb6b21911f3c78a0c75c5b72c8e91699838ffd3de816cf104b8fae70df4f20f9af030dd9056583cf3574b21ac652ed9a0635aaf42216e2dac880e8fcb18d830e0f07df5b70a69a536e60392eda7f952d90cfce631ad6ba4d759314e067f87c60193468308f41e47e0887420d7a624faaec38e747f8b711ec5e19814cd62f284791d1ec358c0c84e6af8f41d13e8b471cb46ee18897282db104bfee1498e863a94fc54e98454cfa1f53905c2506c155e5c125211e25009da60540f978e16e6cf9f6b52ab5d877d844a4b153551344eca11395c80634bba05bef932b5668e6b844c31c099c43445b8d41876fc12fd6c347a56e8735e5b2cc20c63fcd9a2228b7514e0ac5ad39cb7dfd0691cc54f655af5ade6f52ba9c238dad74556275ea346a9286d9202b8d08de4fc7c6424aa5e803d28cd4f89da89b38a28b9c49c47f39d94c90672bba212d9e2251daf43fbe0dd80bdd869239b9bcdda8f97d35f8c3faec96fb5ef30c897e9bc939d2aaa989bf41f845082ea5911e0570b644901f3f864139eb692e0da1f820c0c7e41082f8c23141938cea3878b9cff84230ae0f038b14e24f58d00311d11e139d1a21e098e73bcfad62dbe7ada340137a32fbaec41eb9ddf03792238a6bd0ce88b5e9a5545e528b281c911334f69194c50170d915f044b19fe2471dba8bd7c33551848041407e04317e93ae4e31d221601894cc2116c85d86d01d4dbf96247d731d4c8e24df300e7a565788f67ec531c6a8aa346620d24cd99075e922fa4a5febc10e2f1806669735225cdd107836a3190a9b966690db202bd041ed15fd6fceaadaee5ba5a9e283a248ea9f490ddb70d5f8f9c7ce20119376ff17a176225da4f554e00ed1da946026e89ceb13588ed748e85389e8aaa8e10b52d1340b14ed3af5786f56722d20476f866d502484c2e951a0d0c2008bc0404962d86aef031d3e588b5f887e98b8b5b20dcbfad9cc1e83a6b20a99d9055744f405935b39922158aabc40761103c99616e78f8aeaac483ee809f2cfd48c95f45d04522d2fc9ed312406d2bf646d0cf920717aee35d84cdc7313762d78b4f9cdc97006e8eb485135b1bc3d9b9d770c8972a7fe324e5d3c39be6c962dfc91d936b3a50c2000ceb369f329fdcd7952c1e5e291a6baa4c35629f307176715c04b39a33ecea0216c05783a78dbcb6d39e8808eb306379fe22e360e686500745d0b308e77f6146ac6fae202a25de02d6d8af002c9a9a3d4f3dfd1fa67cada434c6d2b39571419e3f19856ad8b330961fc7d35c5f3e089cf33c778d74f3cee904b79b0be8b308e7db2b724b445d08edfd8979dc6dbac8217bcac06ab9e7413836b3fa404b50a557965855866515b84492b0d9c5d22ab34793f02d7ad3adb8ffc524da4ff34e521730b6d1012f88cfb8205ce2971474ccad6efb22f61c205e64a795f4c5200749ccf53fbd9f6a5040f04a4749720a567b49c3b6bcb68bd6b01aa4754fcc104db78ae2f1bb4efa811ea7c4f2cf15354b841269253787b73f313bdbe1461d829bf51467c868b8b779768b783d48ca846ed1cd1f38d6590cf44fce225976f60ac00c5cdc45fa1434ae699efa45b8586d600ec932ff8c18abcd6c410ffba548088b2dcae2f53bba2f886d2d0a9d3a24d962424922a94a1614911999a3d1ca90617d106872f026243c59ae29882cf2bf9992a899c59339d1dae1daeaef17c0e9cde8d22b47551a15b9b9d55ee27cb669ca1902dae084cde40c9db343ee21c08ef2e66b649667a08501c914dad1ca9bd3b5c8509b645e4beb0e3ca8d874246179c59a22bcde41e0aaac15a847ef33f015a1e0b4e68ddd7a29bf13eed045bf9789cc3f0a146bd840677b9237c0573dd6bd4409fc614f65e03bee267f66712438a05a571e80b03c3778f5e235780cab734e35307f539935909aef195002da151adfcaf3fc85533294f11ce5ad273eebf0a175eee4f1309fe1e1dd978e32bb8eb1f2a930601ab4699fbeb887a5016e2e59cf6373357aff44946c2ba6f9ca32bd376e11c364590a7a2cf2a4d048ed382cdab5c0c5f70e8b55510dab8c60f4f93b35d93ffbd8540873b463f7b9e4b1c29f18ed84682522684575c192665d0925b4304bda0bb841f365eea6973c34d20ac27d20cdfb825ea10df41579cfb218916cd58487beb02cc7d6aa9049172aa661ee01cf348dbc9d879fab9992ed4ddefbe9733b6546374b3fe363df3e775781801f846ab47f879d04985314153391fde5318dca0c97212c1820670fc4bedea0c354bc4c1426058c7bd23354995346dd0d007094557efc749257d4faeb2f0a9b4924872436453cc03b0fe920c7cc00519c8db801ef2d78c7e3ebeedb63fc3f53248ba3e63e2e42c940ecf056fdeac281e3b44cdb6a58879d4368fd4be5a23272077a87bcdce2918492e0d338e6f49e6a46ae22e576cc21d353856a86bc142b5b39b293a33a4dc40a54948c603163fbf3ac68e82079b2330717a3ffa44aff9468a660d90aad1d55dbeb3e7c0237b0d6d8a4d552df9edd63f54fc832306e27f83b44832c6f162f5776c000a8857224021abe22d8ceb806b804f2a2b56452674c2f5bb1533d55682017d00cc76f7df1ba46a241ad77501fe41e05a51e54de290d62c7800443925d33858b640c764c6d9653c525cd81e736e3e4ce5c7ddf69429b3510fd1612740a648a510c80940dda00505ae1ad54644059a7997c7765b2ff8d578f734bfd0beb8fc82dc327dd02e262b0775c2bfe3d5caef2067865e5393362ce2c5703810be9ab20d3d302ec6536a40c87225a52afd968e4b726d2f01e931cdc56375097d35abe51733567481d4a46e6eaeaa43dd39a687973f45345e7d7656a2206374b93ae2c334cac102b4b44c9c625decfeacd12775f55173021d37f9d0e047e8b12a496ecef4aa0d5ddbdcf1bf276795d6b6bef8460e97464a03f56d5c5b9d6105d37de282049676347cbb07072e48cfd2e490daa147dbfb25eabb1c4c5081f627a72d37e862bfaba972391419fcf9d048b024389fa5c36f4568e7714f842c6f4", 0x1000, 0x4004005, &(0x7f0000001100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r3)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000001400)={0xd8, 0x1c, &(0x7f0000001a80)})
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001380)={0x990000, 0xfffffffc, 0x4bd9, <r4=>r1, 0x0, &(0x7f0000001340)={0x990a62, 0x9e000000, [], @value64=0x6}})
sendmsg$OSF_MSG_ADD(r4, &(0x7f00000016c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001740)=ANY=[@ANYBLOB="680200000005030000000000000000000c000001540201000000000002000000010708009d281c0073797a3000000000000000000000000000000000000000000000000000000000548e5e139d013934318815dc58dc35779d5d25803c4dc75baca6c2aa3f2556b19d56ac3656bf9de2d89479cae34d878ea9adadb7d8fe5441b10a8804e8169e2cffff010101000000030000000800090001000000f7ffffffb67c0002010000000600000009001f000300000000000100090007000200000000000000ff0789c00100000004000000703004000200000002e000000700f0e2030000000600000006000900000000000800000000080010030000000500000006007f31030000005b0a00000600c80901000000dd000000200002000300000001000000ff7ff9ff03000000400000000800030003000000050000002b050600020000003c000000faff090000000000c2d1000001000600030000000000008007000400010000000300000068002400020000001f000000050000010000000080000000090002000000000007000000580706000300000005000000910006000000000003000000030095480300000009000000ff01feff01000000ba7d000001041c310300000066000000ffff02000000000008000000400000000000000061ffffff0800050003000000810000000800ff0302000000050000008c000100010000003f000000ff000200020000000100000020000001030000006c0000000700810e02000000340800000600fffb00000000010000000101050002000000090000000800070000000000000000002000ba6e00000000070000000900050002000000800000006707934ed47f2a76ac13970b7d153b00729d1353ffdb8a02189ad99a2e12be09db20d1ee2c37243cecc8b259d2990f19afe424e633a5bdc1f055d2e8cff09b6ef8cebd33a06527589945b20354582a274be0b54bf32a6d1a0053ec31f8e6ff9cad60ab10b78efb4872766040f25de56b0a2e15af0535bbe02817cb99c71c1a5f25f69d2077aae782080c3e4ec23e2a0fc08580d1778cdbc5f266977a9d9bba5bd79ea279b14fe1cc262fd4c266715c547d3990a081cea21916ae47eb77588f03b919f2d720a471982a14ab7829e1de0b5408efef64"], 0x268}, 0x1, 0x0, 0x0, 0x4040000}, 0x20005020)
ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000001200))

04:16:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6364, &(0x7f0000000200))

04:16:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:51 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000040030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:51 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b64, &(0x7f0000000300)={0x0, "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"})

04:16:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x644b, &(0x7f0000000200))

04:16:52 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockopt(r0, 0x5, 0x8ae2, &(0x7f0000000000)=""/211, &(0x7f0000000100)=0xd3)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000140)="631d917bdb451ee7d21dcfa8f43e2d2e33f119a5926636e8da0754", &(0x7f0000000180)=""/45, &(0x7f00000002c0)="8e69e7dc73768804a11973054c007e1dedf27ca0e62b78f24592351fc413b65e29c5a1da72c973d13834f419db7d74032a313c4663ac2e69e973b297bcc95d80d464d065ae7bcf20166135530122dbd1e0fcca9857d7f2bae9bcea6e0a55bf60e791d4d0225423941f48e799c66798c4e96bb338365970ee75c600750a89e75636ed842f454853ccc333ba191ffdc2b7f0fa9acdb4a7aeb1e3d4ea5bbd1900370f6ec9c7de86eb23324f5130416da7048cc9a4333e377adec25318b282d48e82d1b61f67b9980ed5d20ba4a3879f7e9a9459519c070bc9fd775dff42bb465e37b9581a", &(0x7f00000003c0)="74ebac73e542b0c9b19c3bc44e0af1e4f823281fdf435b6bae098be9f343b92aa5125648b4617b14e19ac773ce514c702562b1b731ba556b7e460dba70aee3c8e2df4188e94f8bfd56efbc07e492f0b5ffee541098895e888be1a6568e50", 0x9, r1}, 0x38)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a30aac68ca3934bfe85922c2d53967672c55cc4a68a0d6e61420eb5674deb910a4a8cab7da2ffb222ae39239862844ae988eaec68cb90700475545f72127a095911c00aacd39710a0b4deb4e2a1e582de803eb9cdab3874dfcfafec6cd32c00539dcb3ff9fb85b0509f40c48bbe94d0508897f4af3a1f91fbec19b8db813915bcd9"], 0x2c)

04:16:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000040)="0a8c7a234641c5c92d5aa20a677ac164453f17fd3198a48dc9fbeb0324768b09c15c5f07e4ec6776dc0beff781aab9cc44738559e05e9180051660254bd240076f6c0c5e1fb58f0d354c2f5f6af3d59b7b8416e25455")

04:16:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6463, &(0x7f0000000200))

04:16:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b65, &(0x7f0000000300)={0x0, "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"})

04:16:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockname$netrom(r1, &(0x7f0000000040)={{}, [@rose, @rose, @null, @bcast, @default, @remote, @remote, @rose]}, &(0x7f00000000c0)=0x48)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x4001, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000180)={0xe990, 0xc, 0x4, 0x2000, 0x8001, {0x77359400}, {0x2, 0xc, 0x1, 0xe6, 0x7, 0x6b, "f74c684a"}, 0x401, 0x2, @planes=&(0x7f0000000140)={0x3, 0x1, @userptr=0x10000, 0x7}, 0x80000000, 0x0, <r5=>r4})
ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000200))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r6, 0x4b48, &(0x7f0000000200))
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r7, 0x5412, &(0x7f0000000000))
ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000280))

04:16:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000048000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
recvmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/139, 0x8b}], 0x3}, 0x40000022)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
fsync(r1)

04:16:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b66, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x654b, &(0x7f0000000200))

04:16:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_dump={0x3f, 0x1f, 0x5, 0xb3, "bcea274c15d0c96eb41b335f27646e267d17bfe626d18ac717496b05a7ae914c04c01d0fb10334de0fb5abcb2b6965bf47ef82134dbcd4855e2dcd51e4739ddddef8178116d140e0430d40e58d88e25d54ded4a150a9b4bdd23c956bb48706fbaaebc81e2c86aad77baa3fbad534a141e93800c0ac24c8856a08c5052ca95d20a7b0749e6b603d3c177d37e0794f7392da9aa2e4643528d5f9133911370036f42c6bf350fe042e0c01a4414de2bf4765c6f2f7"}})

04:16:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x7, 0x2, 0x4, 0x10, 0x8, {}, {0x5, 0x2, 0x7a, 0x50, 0x80, 0x3f, "849a4cf1"}, 0x1, 0x3, @fd, 0xfffffffe, 0x0, <r2=>r1})
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x36, [], 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)=""/54}, &(0x7f0000000200)=0x78)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

[  937.741249][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  937.741265][   T26] audit: type=1804 audit(1582431412.718:531): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/992/bus" dev="sda1" ino=16553 res=1
04:16:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b67, &(0x7f0000000300)={0x0, "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"})

[  937.895925][   T26] audit: type=1804 audit(1582431412.778:532): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/992/bus" dev="sda1" ino=16553 res=1
04:16:52 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'rose0\x00', r3})
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/80)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000100)={0x2, 0x0, [0xc000, 0x200, 0x5, 0xa0, 0x6], 0xae8f})

04:16:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x664b, &(0x7f0000000200))

04:16:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000000)="46add2f128f99f10e8b0b1e5014f2e1a32d5fde4249530de0804c476c4e1d520233ccc33829c81001a5be519aae1af8300e649ad4d2ac88718ca3a68129bd0df4eaa256a53811875aafdb09a9c92261e60b8b8d63c0bbb520e6252fb1dfad69efc9df9d8c8785a12ba7dbb8122e7f5085bd8962b12d72968148f27886c089967fc31c60ff008041d19568b5c8f8c8d2efe7ad20b0e8f4edaba1c8fd0a06d865def4c6e6325715c24caf63693315a3eac6c741926fe7791335413a565d437")
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:53 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400004c000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x851)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202023205d657468312d020000000000000065766c6f4020747275737465642073656375726974793a5d2870707030200a23b77d58c5e0cf14622eda3d0ba38e7a3a727c"], 0x46)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0x1e, 0x1f, 0x14d, &(0x7f0000000240)})
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x10000, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000200)={0x15})

04:16:53 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b68, &(0x7f0000000300)={0x0, "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"})

[  938.282643][   T26] audit: type=1804 audit(1582431413.258:533): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/993/bus" dev="sda1" ino=17995 res=1
04:16:53 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x674b, &(0x7f0000000200))

04:16:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000040)="6b539785bf28dd7e0443da1030173f955461b9e732987fe2a0d92a30880e15931d721ea6e0a7032a56afae82e28429cb46d05f7d42048a042f90102de6ac8ef05527")

04:16:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
io_pgetevents(r1, 0x400, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)

[  938.391937][   T26] audit: type=1804 audit(1582431413.278:534): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/993/bus" dev="sda1" ino=17995 res=1
04:16:53 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000056030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:53 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b69, &(0x7f0000000300)={0x0, "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"})

04:16:53 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x684b, &(0x7f0000000200))

[  938.741333][   T26] audit: type=1804 audit(1582431413.718:535): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/994/bus" dev="sda1" ino=17995 res=1
[  938.848669][   T26] audit: type=1804 audit(1582431413.758:536): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/994/bus" dev="sda1" ino=17995 res=1
04:16:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe(&(0x7f0000000080))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:54 executing program 4:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000180)={0xa, {0x2, 0x9, 0x1f}}, 0xa)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x240000, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x7, 0xf95bd120c29cc3ec, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf35}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6187b468}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000881}, 0x5)

04:16:54 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b6a, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:54 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000060000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x694b, &(0x7f0000000200))

04:16:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
socket$rds(0x15, 0x5, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000240)="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")
r3 = pkey_alloc(0x0, 0x7)
pkey_free(r3)
pkey_free(r3)

04:16:54 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b6b, &(0x7f0000000300)={0x0, "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"})

04:16:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6a4b, &(0x7f0000000200))

[  939.261155][   T26] audit: type=1804 audit(1582431414.238:537): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/995/bus" dev="sda1" ino=18006 res=1
04:16:54 executing program 4:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x401, 0x5, 0xff})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONT(r3, 0x4b48, &(0x7f0000000200))
r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0)
ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x4, "75678e00e758a63175fe8501145cc28420ea398c08cc04982f47464f0982f585", 0x3, 0x6, 0x5, 0x320000, 0x4000020, 0x8})

[  939.374646][   T26] audit: type=1804 audit(1582431414.308:538): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/995/bus" dev="sda1" ino=18006 res=1
04:16:54 executing program 5:
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xa20000, 0x5, 0x40001, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9909d5, 0xfffffffe, [], @p_u16=&(0x7f0000000080)=0x87}})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30)
write$cgroup_pid(r1, &(0x7f00000001c0)=r2, 0x12)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/89)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x4800, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0)
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)

04:16:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:54 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000060010000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:54 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b6c, &(0x7f0000000300)={0x0, "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"})

04:16:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6b4b, &(0x7f0000000200))

[  939.787836][   T26] audit: type=1804 audit(1582431414.768:539): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/996/bus" dev="sda1" ino=18000 res=1
04:16:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f00000009c0)='.\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000080))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
exit(0x1)

04:16:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

04:16:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9a0000, 0x3, 0x101, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090e, 0x9, [], @p_u8=&(0x7f0000000000)=0x8}})
ioctl$KDADDIO(r1, 0x4b34, 0x100)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:16:54 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b6d, &(0x7f0000000300)={0x0, "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"})

[  939.905994][   T26] audit: type=1804 audit(1582431414.798:540): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/996/bus" dev="sda1" ino=18000 res=1
04:16:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6c4b, &(0x7f0000000200))

04:16:55 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000060020000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:55 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b70, &(0x7f0000000300)={0x0, "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"})

04:16:55 executing program 4:
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1)
mmap(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0x0, 0x20010, r0, 0xc91a0000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$packet(0x11, 0x1, 0x300)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200))
ustat(0x2, &(0x7f0000000040))

04:16:55 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x6d4b, &(0x7f0000000200))

04:16:55 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000066030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/22)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:55 executing program 5:

04:16:55 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b71, &(0x7f0000000300)={0x0, "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"})

04:16:55 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x704b, &(0x7f0000000200))

04:16:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x50a00, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x8})

04:16:55 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000068000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000000)="9b7943d11816e3ba833c4a02bfb9df9861f97b371466772d6ac21a8ca20f769680e3fa34e69ec42c6a6f027405a8f94e")

04:16:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x714b, &(0x7f0000000200))

04:16:56 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b72, &(0x7f0000000300)={0x0, "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"})

04:16:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TCSETX(r1, 0x5433, &(0x7f0000000080)={0x1, 0xac3b, [0x800, 0xc5, 0x0, 0x4, 0x4], 0x401})
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:56 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x80)

04:16:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
eventfd2(0x1, 0x80800)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000040)=0x1c, 0x80800)
write(r2, &(0x7f0000000080)="d642870dbd8116f2c0608d970f1788b0ec8812ade0adf53f7c2c98fce1f159a2339bf0760466b62762b2f52b3265971915", 0x31)

04:16:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x724b, &(0x7f0000000200))

04:16:56 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400006c000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:56 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4bfa, &(0x7f0000000300)={0x0, "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"})

04:16:56 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r3)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8)
r5 = getgid()
setresgid(0x0, r5, 0x0)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getegid()
r8 = getgid()
setresgid(0x0, r8, 0x0)
r9 = getgid()
setresgid(0x0, r9, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4000, 0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
getresgid(&(0x7f0000000380), &(0x7f0000000640)=<r11=>0x0, &(0x7f0000000680))
r12 = getgid()
setresgid(0x0, r12, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}, {0x2, 0x4, r3}, {0x2, 0x1, 0xee01}, {0x2, 0x2, r4}], {0x4, 0x1}, [{0x8, 0x1, r5}, {0x8, 0x0, r6}, {0x8, 0x0, r7}, {0x8, 0x0, r8}, {0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x4, r11}, {0x8, 0x1, r12}], {0x10, 0x1}, {0x20, 0x4}}, 0x84, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f00000003c0)="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")

04:16:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8907, &(0x7f0000000200))

04:16:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x90000002)

04:16:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x503000, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0))

04:16:56 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4bfb, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f8", 0x4}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d01a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1a", 0x65}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x1}], 0x1}}], 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x40040, 0x0)
ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0x8)
ioctl$PIO_FONT(r3, 0x5452, &(0x7f0000000200)="9b")

04:16:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8912, &(0x7f0000000200))

04:16:56 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e20, @broadcast}})

04:16:57 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000070020000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:57 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4c00, &(0x7f0000000300)={0x0, "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"})

04:16:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000004c0)="350abab72f4b3497d3eff85094ea0e1b39bbf95792d7b17db08f89349b2b568b8125dea29e0227960828835c0978853c6f2dc270e4bf896dc7b283f03b8bf5a83c75d75f934ba3210b2275fb8af67508962ff964bf3602ef9b9b4f2fc2fc4a8b1113058ba10a80bbfec5e96cc27c2b3bd39a4d56c9ed7da6c523bd170c5231ba2b15af580892ea1663acbfdedad105f0cc476df99c1ff5c1ba88761e9e4c52b5703bba73c69d67d32400051e6ec6cdbd24a22402e66711f5cb37bfd8faf4ef3544b1a40d247d99bd493f320075e2bd513fb27066b017ee")
ptrace$getregset(0x4204, r1, 0x46e62b7f, &(0x7f00000003c0)={&(0x7f0000002300)=""/4096, 0x1000})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xffffffff, 0x9, {<r3=>r1}, {0xffffffffffffffff}, 0x9, 0xcce})
process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/219, 0xdb}, {&(0x7f0000000200)=""/165, 0xa5}], 0x2, &(0x7f00000002c0), 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x40000, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7)
ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x5, 0x81, 0x7fffffff}, 0x10)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

[  942.230972][T11904] QAT: Invalid ioctl
04:16:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x8933, &(0x7f0000000200))

04:16:57 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x14800, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/64)

04:16:57 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4c01, &(0x7f0000000300)={0x0, "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"})

04:16:57 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000340)="8ca0c1339629bc5d87af47ed871b192d690df15193dfe8b5d7d9565e368bd167992ce84d283eba89809414827131cb768291d25abdef074450d784e3b2d32c8ec51235288d8551cef63c02ce3961ea93badb73dc6e7d52bea08ac97ade1b5676da153e5e370f313d057d051efeb747ce5455132382e65e967879ee2ad733d42fee0660736ac3c60fbffd61c0458dc9c2ce603fee4d49cee1938a75bf6e75ec3e5e7d433d66fa2c1392623e229801022338742caeed8cc27e96c94921223eab3f5028da24000000d7ef2f00a3f2167b307800960740c8")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x80000001)

04:16:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040))

04:16:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x89ea, &(0x7f0000000200))

04:16:57 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000074000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x4, 0x7, 0x4, 0x4000000, 0x7, {0x0, 0x7530}, {0x1, 0x0, 0x7f, 0x3, 0xf8, 0xff, "b0712a4c"}, 0xcb, 0x1, @offset=0x7, 0x9, 0x0, <r2=>r1})
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100))

04:16:57 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4c04, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:57 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  942.846132][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  942.846147][   T26] audit: type=1804 audit(1582431417.828:551): pid=12213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1002/bus" dev="sda1" ino=16802 res=1
04:16:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xa154, &(0x7f0000000200))

04:16:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x7, 0x1, 0x4, 0x200, 0x18, "1dbc2c0babb93a07"})
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

[  942.972871][   T26] audit: type=1804 audit(1582431417.838:552): pid=12213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1002/bus" dev="sda1" ino=16802 res=1
04:16:58 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4c05, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:16:58 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000078010000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:58 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)

04:16:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xea89, &(0x7f0000000200))

04:16:58 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5409, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  943.374596][   T26] audit: type=1804 audit(1582431418.348:553): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1003/bus" dev="sda1" ino=16528 res=1
04:16:58 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000100))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000000)="5d8c38230f2143dda73ac33c7dcaa3aadc535b687e3d3b2a9cb5bf223290dd0f5e5e55bc22a556c7b1f81c3e9cb49e503a61e86c48da05b135c82af30e27997b30d569150567b8c244a9e671e796d4d05d9868885568648fe3a4aecb1d1f001c296bd844b491ff765ad682f3236d13fbec9420ed531fdeb7be68fdd3459a5492690fdcc706169175adbeaf89ad8e9c799f9f26153e44e8ff68dfec9072abbe779a06247d5adca2e4b3ab2fc6d7e67787020f1865bd01d393c79e3f41fd14082a050e90f64d200b39b97946ed8c")

[  943.513237][   T26] audit: type=1804 audit(1582431418.348:554): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1003/bus" dev="sda1" ino=16528 res=1
04:16:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x10000, 0x0)

04:16:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xfa4b, &(0x7f0000000200))

04:16:58 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x540b, &(0x7f0000000300)={0x0, "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"})

04:16:58 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x400007a000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:58 executing program 1:
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/41, &(0x7f0000000040)=0x29)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:16:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xfb4b, &(0x7f0000000200))

04:16:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f00000000c0)="7f0af725a53229854ea52d9d14ef5e1190de563d025a24bdb8c64604180f9abff790262cc39c9f2caabe3b9cdc29fb1f5794fafe03184137da1836811b6cf3dd3260017a5383f36f23f755e3f537237c92e873a0a27e4e8111960900000000000000f0cccb32989d83a387ff4e61abb1ab466cca4389eb95b9b1248f3a9d975704d575c81908cf9cb2f5ca5ad7b06a259578b4f5c9866caf1c24f70a4aff2b8aafb0aa2f822d945b3b50b3fa057cc6742212dadd24dfb2c56c1b31373ebc434a335c5b5fe70f1fb35109e6737696f9de547067309e03a20dc5b61d48f748db7d4644315ba61239739d305318")
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)

04:16:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/90)

[  943.939358][   T26] audit: type=1804 audit(1582431418.918:555): pid=13104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1004/bus" dev="sda1" ino=16706 res=1
[  944.055259][   T26] audit: type=1804 audit(1582431418.968:556): pid=13104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1004/bus" dev="sda1" ino=16706 res=1
04:16:59 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x540c, &(0x7f0000000300)={0x0, "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"})

04:16:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x400454ca, &(0x7f0000000200))

04:16:59 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000086000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:59 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x282000, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r1, 0x5452, &(0x7f0000000240)="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")

04:16:59 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCNXCL(r0, 0x540d)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:59 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000000)="61516250f0bf8352488c9f4679734e")

04:16:59 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x540d, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  944.415391][   T26] audit: type=1804 audit(1582431419.388:557): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1005/bus" dev="sda1" ino=16738 res=1
04:16:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x400454ce, &(0x7f0000000200))

04:16:59 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001800)='/dev/vbi#\x00', 0x1, 0x2)
dup3(r0, r1, 0x80000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000)
getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000180)=""/137, &(0x7f0000000240)=0x89)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/80)

04:16:59 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000088000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:16:59 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000040)="9b5dc92c73e79b4a75bfd9c1d78710a6")

04:16:59 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x540e, &(0x7f0000000300)={0x0, "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"})

04:16:59 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttynull\x00', 0x8c300, 0x0)
ioctl$PIO_FONT(r2, 0x4b48, &(0x7f0000000280)="ce6d320d5a6c283793c598f74707c1a08fdf5c0d682f3df7829ceb54bd4fe0f12944e249b90400080076a455d8978e5141ad5be8347306f3be7cdd0ad7651bbdecdcd9d48f93505002aec847833f089b393b5c636d692fdaea3c0f25b25b15a1cc87e902122d5648e94a361f8db1c62db07b4ab1ee9d3c3e8d93f88745ca3a527edf4fbe273bf8a73d4fda49b4ce0e015686ad5e4b86fd6df23caedaf029132a70063d47a24cfc90482e0fd4d14d068d69fefe7cc556b25508247a63142408bceb9b57d97aff3e0d485eca94bf3bcb715b13257fc574fda04b8c00"/246)

04:16:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40049409, &(0x7f0000000200))

[  944.945843][   T26] audit: type=1804 audit(1582431419.918:558): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1006/bus" dev="sda1" ino=16882 res=1
04:17:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="31cd9b1ae093738e4880b0cc01a2b5ea4ad823f512fcdbc4ee72922765b61689aa83")

04:17:00 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x540f, &(0x7f0000000300)={0x0, "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"})

04:17:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x40186366, &(0x7f0000000200))

04:17:00 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  945.086077][   T26] audit: type=1804 audit(1582431419.928:559): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1006/bus" dev="sda1" ino=16882 res=1
04:17:00 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000a0010000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x5, 0x8, 0x5, 0x9, 0xd4})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:17:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0)
write$P9_RLERROR(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000007010006002d2c70707031c9be77a5e4286abc18c7fc41dfb0515e8e3bc460e32f76ac36fc40c615c1378edb1e7a63416fc547628b63e91750562c41060dafa422ec4aee75cc2b3c87182c20a80fe13618421695cf6526af7df9139b7b3f77e884bcf1acb94e34baf62fbe9f4e00407fd6170213a4adfa7d44f349da6170b6676eababb2d55d7ca69fecc27a715e626e4dee235f3ba7592ad7bb5aa7df8976510b5a46a84848045c0d322c82d890c7158d135791811dfa2c98d387947b554805ed161b9d4e04deed469881c1d382a784d82f3b9c79b878b89a4176f0870ccd28bb2922629defd9e96c4ab5628d5df9f2ddfeaa009fd53700921528ae0a78418a5b3d660e23f6df9ecca3b9076be21d4157aa1bc8931c01dbcc71c2c80d916170c37d05100950c40c66f6a93ccd1a17604fabc2b2c210ce0663fc2b85ad16dba451be63dcc58cf2a767cf8e525d9eb638a82594df3e86ca5fc3bb53ea1e24e178c2bcadcad9c8e4f0d4e2c8d7"], 0xf)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x3, 0x7fff, [], &(0x7f0000000080)=0x6})

04:17:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4020940d, &(0x7f0000000200))

04:17:00 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5410, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  945.462042][   T26] audit: type=1804 audit(1582431420.438:560): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1007/bus" dev="sda1" ino=16531 res=1
04:17:00 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0xffffff01, 0x5, 0x6, 0x7fffffff, 0x81, "ff37de0b4b8e206155980b41c92904c688e149", 0x9})

04:17:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80044942, &(0x7f0000000200))

04:17:00 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5412, &(0x7f0000000300)={0x0, "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"})

04:17:00 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000b4000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:00 executing program 4:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f0000000200))
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)={0x200, 0x5, 0x4, 0x81, 0x3, [{0x1ff, 0x3, 0x6, [], 0x15}, {0x800, 0x940, 0x6, [], 0x408}, {0x0, 0x5, 0x100000001, [], 0x180}]})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = dup2(0xffffffffffffffff, r0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000))

04:17:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0x5, 0x9, 0xbb, &(0x7f0000000200)="b76d3407ac7ea8cb00eb8bbbc4ba5797b281ba4e7eb2a90308c813c64cb60e37e4b4b95c95a43c098d5b96b120836d90887db3e335375bd9bf2b94948eec099a98af38556312af7018c5b8d182c9198252c0a327a78079725492ed424801e3201d79f69aca60d8cecc5b1a99b9516c5701e5ed5cc638b22145728a63e796c8b6c0c57ea804a358c9e6cbc2a22de7056950a9be0d75253db045d860627544d5f61281181867117b9a2a0ceff806ef9345273159bf4761de7aa5d752"})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f00000000c0)={0x2, 0x40, [0xd1d, 0x1, 0x9, 0x1a33, 0x800], 0x9})
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/95)

04:17:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x4)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)=0x2e)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:17:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5413, &(0x7f0000000300)={0x0, "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"})

04:17:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80045432, &(0x7f0000000200))

04:17:01 executing program 5:
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/82)

04:17:01 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2d00, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0xd0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{0x1f, 0x8000, 0x7, 0x7, 0x5, 0x0, 0x9, 0x3f, 0x8, 0x7, 0x7, 0xad, 0x10000}, {0xf0, 0xca0e, 0x1, 0x8, 0x6e, 0x8, 0x70, 0x6, 0x2, 0xf2, 0x7f, 0x7, 0xa04}, {0xfffffff9, 0x0, 0xa2, 0x5, 0x7f, 0x1f, 0x54, 0x4, 0x48, 0x8, 0x1, 0x9, 0x5}], 0x10001})
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}], 0x109, 0x0, [], 0x4, 0x1})

04:17:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80045440, &(0x7f0000000200))

04:17:01 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000cc020000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x80, 0x81000)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8)
r3 = getuid()
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="c97ce458625dbc6dfd865cc2a1f2461ea5aab9c243a25f396c8fd0930204f19cb709421cd5713cf243d39e9ea65eb4d7036883618a3e1bed507b4fb36ab94a26ad762d21dcf5af1b466cc43afd8be70a2214e1d40e751c61876cabd561e0554a1d6c9d02e9466437a8ed02e42938cbd66df254f4c0d985c55b81bca3c4f05297b2f854d04e54c50f528d157bb408b03bea0b7f8edb878b11719a147887d12426c166d5058986a0cc48a57bc6d544db6e6a5e04e2b23c6b63ba0b03ecb9fd19a7a2c246d3f7db5936b2accda7d4612ad0a6", 0xd1, 0x6}, {&(0x7f0000000180)="0d7a80b941e5", 0x6}], 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB="747970653d02fcbaee2c756d61736b3d30303030303030303030303030303030303030303134352c747970653dc3b42c3f2c7569643c", @ANYRESDEC=r2, @ANYBLOB=',hash,uid<', @ANYRESDEC=r3, @ANYBLOB="2c730300008d74e3b5292fb42a2c61756469742c7375626a5f747970653d2c726f6f746365645f752c0097066e7572adf9a05bcfe521b5dfbe3ee9213494270ebf8a9de996f2f6fef7487a21c42027164ac88ad0932f65146bdb51c265fc380fd92558b366b97bce9993095cab6bd340141edce99ef1d7d9c00f156f43d18e40cbe439efe0f1a802550d0691a6d7aae7b2f59ad221b7538f2ae0556d1b00"/172])

04:17:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5414, &(0x7f0000000300)={0x0, "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"})

04:17:01 executing program 5:
clock_adjtime(0x1, &(0x7f0000000080)={0x0, 0x8, 0x10000, 0x3, 0x8, 0x7, 0x1, 0x2, 0x1, 0x2, 0x401, 0x7, 0x5, 0xffff, 0x2, 0x0, 0x9, 0x9755, 0x81, 0x7, 0xfff, 0xff, 0xbf, 0x7, 0x7, 0x3f})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x31, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = dup2(r1, r0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
dup3(r3, r2, 0x80000)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x40, 0x0)

04:17:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x80086301, &(0x7f0000000200))

04:17:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5415, &(0x7f0000000300)={0x0, "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"})

[  946.607644][T15013] hfsplus: type requires a 4 character value
04:17:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045003, &(0x7f0000000200))

[  946.666479][T15013] hfsplus: unable to parse mount options
04:17:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5416, &(0x7f0000000300)={0x0, "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"})

04:17:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000000)="73785a6f0b0ba830537666811c6f158c7334233342c919c883352b18a209d25d77190219366c6d8ada706e7014f0ff7a67326017584db1be43e62cd3db962ab7e9ec8492c1f62a94223388d411aede062ee6c480661eb1667e03ff4d288492292eb44de9d1b55745bbdaf95885d5b358f92ec8d9dea2d515c993108ff3163b4c3e6fdc7ca179c83488cd5f18f4c83ab6f78df790f81db3c013c83c049c52c0d8239939bccd6fd617bf3573f87ceb2b2e6fa2e4fb202db95638155639f729fa44ddea2f5e9258c8cf3e8dc960c83df728f69947124232099a4021f44a3f1800b7cf68c01dbc656b8929846336")
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r3, 0x5412, &(0x7f0000000000))
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x8, 0x1, 0x0, 0x3f, 0x1}})
r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x228000)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000240))
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000140)=0x9)

04:17:01 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000d0030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000080)="5b091fa9d86fe69e8fd0e89c28d2bdfca52851b18b2b082063572385061d7bb6a7234b230b605b5c548aaf4d92198807fc1b50dc4e2870d78366f13c20214055cd0285a08bd1b4cf02867428410fa7c7006f342581dbd7484039bfa4f7d356133c4776")

04:17:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045878, &(0x7f0000000200))

04:17:02 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5418, &(0x7f0000000300)={0x0, "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"})

04:17:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0045878, &(0x7f0000000200))

04:17:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001840)='/dev/vcsa\x00', 0x80000, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000001880))

04:17:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x8, 0x1, 0x4, 0x4000, 0x80000001, {0x0, 0x2710}, {0x3, 0x1, 0x4, 0x6, 0x9, 0x6, "921bf581"}, 0x3f, 0x0, @planes=&(0x7f0000000080)={0x3, 0x5059, @fd, 0x6}, 0x831, 0x0, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="b2e0ffa15ad1af0700"/43])
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
write$P9_RLERRORu(r1, &(0x7f0000000140)={0xd, 0x7, 0x1}, 0xd)

04:17:02 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="a9967c0086b1345bebe12a49d115071ef9813ffb4ffe333006a99b5d1c932e78f39a6d5554e1abb511c52858278957855e421fc2dd27e30ba63bb77c46e5e22720f1ef3e40b93a854127fa256ca06318e2a17520d9bc515b56f1e9516fcb5b2fab3727111dccdd414a886c8fe4e3743e6debe4bb66ac1754b41873abbfbc0af0c7c9")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000040)={{0x0, 0x0, @descriptor="9593f3eb74dd3568"}})

04:17:02 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x541b, &(0x7f0000000300)={0x0, "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"})

04:17:02 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000da010000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0189436, &(0x7f0000000200))

04:17:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000))
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000000c0)=""/24, &(0x7f0000000180)=0x18)
ptrace$getregset(0x4204, r1, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000))
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r3, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r0, &(0x7f0000000080)={r6, r0, 0x7})

04:17:02 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x541c, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0205649, &(0x7f0000000200))

04:17:02 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x14, &(0x7f00000000c0)={r4}, 0x8)
kexec_load(0xb7, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000180)="58c728ad62db0c4d575eea3dea788d735f51db758cadbfd22f5642504cbaccda972ad784dbe747941d394e1806f50c8e1b6b062dff9284da81757fddfcdc128c4810d891200e114fb542d842c40dfde204b3490003955ab6a25bc4bdf9", 0x5d, 0x56efec97, 0x100000001}, {&(0x7f0000000400)="283a6dfea49f03a507978f37047cbb8674b6f45d7fdaa87b9d088505767c159a32d08146c9255c43ff31aa914121fc7f5be46331ea539220e792f79fdf29821b1fd10ae19cc96c28bb045c131e79c30174434d961d6e93ce96a5b70fc6fd9b9ad213c25d4a3637fc3f9ef36e2909c9a68644abf5275fdd1f0c9a8d61cb535db0745430032e0b9d1e31f4db183fddcc3d09fc1de51ae2826006e8747bd8fe8c73ae222c82e3ffceb554e48b090bd0ef961165f52467342d06e495834373a40dd3459779dee584bd36b4e3a632bad8a08aa40a72c07550e7cbfd4cb8fc8d6a9ce71e54a0b8dfffe7b25c004d21c6385a4836bd9c3c", 0xf4, 0x1844759a, 0x98}, {&(0x7f0000000280)="88fbb467149ca1a49738f2ce5fc623f7b497d0972d934bb48b23120bd7824032244d87547dfdc7a388410bea1a9a4b35e1be5e8a2ec10e9154db35bbefcf9e50ee830b64218b7794ceb085c5d53f989c1bcbc35be42e2d1237157e58cfe51c3fbc3529bc61e3aef24565bf944beec6c14aee190ae0eab94cdfbb", 0x7a, 0x40000000000, 0x2}, {&(0x7f0000000500)="1beb696e5b1e49be5108f5ab1dd707b311289358954aae9d6662eb6fcb4b13d45cb42935b220f921989f0f2c2fc7b6a03ede8c2558107db1c45df54daa5a43f7fc7969bfe229bc038d634b16e750c99e31e85a1a874ee00cb1784d2fcac790b3b56c1f3245761cc96542daf400b45e375fb1b1e8bc950f77b221789ab5469e113e972ce1449f1dd1f0566f4349844eeab9ab8d4480eacacd51f7471bab19a21228b067359f53e85ad153335ed6", 0xad, 0x8, 0x2}], 0x3e0000)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={<r5=>r4, 0xc0e}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r5, 0x7}, &(0x7f0000000140)=0x8)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000300)="21c86c4c2c49aa3bbe822a3a2f26747de8def310982783b731df7eb0b2579109dbe617431c12d9d18855e7b9274b97e1bd2f167fd85b36d2c49eb32950ddeac808d050942f53ec173c437ea7024acf436539693c9637c1f72a3000187ec24824b0fc98aceddceb195cc11ec11af8e114226c3dc2091ea1546f983b56fd6099862f63dab1dec48ffea72b590949ca2184f890544be9ee1693007b9a127d16dd774259ba42338d54783f4ad4f0167885b1b873887d4a0185db7741bddd3522699ddc5cc3c8f0b969f0e54a8600000000")
r6 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x10000)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0)

04:17:02 executing program 1:
r0 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0xbf, 0x209, 0x9, 0x9, 0x80000001, 0x8b6, 0x6, <r1=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0xf423, @empty, 0xa43}}}, &(0x7f0000000140)=0x84)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000001c0)=0x1000, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001280)={0x0, 0xff}, 0x8)
listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/4096, 0x1000)
ioctl$PIO_FONT(r2, 0x5452, &(0x7f0000000200)="9b")

04:17:02 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x541d, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:03 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000e0030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc020660b, &(0x7f0000000200))

04:17:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'bond_slave_1\x00', 0x9})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:03 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x541e, &(0x7f0000000300)={0x0, "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"})

[  948.233283][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  948.233300][   T26] audit: type=1804 audit(1582431423.208:569): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1012/bus" dev="sda1" ino=16622 res=1
04:17:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0286405, &(0x7f0000000200))

04:17:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00')
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x1c, r1, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
syz_open_dev$tty1(0xc, 0x4, 0x4)

[  948.435632][   T26] audit: type=1804 audit(1582431423.218:570): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1012/bus" dev="sda1" ino=16622 res=1
04:17:03 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/80)

04:17:03 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000e8010000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:03 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x541e, &(0x7f0000000300)={0x0, "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"})

04:17:03 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x14, &(0x7f00000000c0)={r3}, 0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r4=>r3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x7ff}, &(0x7f0000000100)=0x8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r5, 0x4b48, &(0x7f0000000200))

04:17:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0xc0405602, &(0x7f0000000200))

04:17:03 executing program 1:
sysfs$3(0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0x72fb, 0xff, 0x8})
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
ioctl$KIOCSOUND(r0, 0x4b2f, 0x10001)
socket$isdn_base(0x22, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1, 0x3, 0xa50a, 0x7, 0x1a, "364ad5509094887a94ad1d5026772df76a3264"})

[  948.789450][   T26] audit: type=1804 audit(1582431423.768:571): pid=16652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1013/bus" dev="sda1" ino=16624 res=1
04:17:03 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5421, &(0x7f0000000300)={0x0, "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"})

04:17:03 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000000)="708788e133a18e42127081282b8adbc6ead98567")

[  948.957483][   T26] audit: type=1804 audit(1582431423.768:572): pid=16652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1013/bus" dev="sda1" ino=16624 res=1
04:17:04 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000fa030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:04 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)
r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r7)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f00000000c0), &(0x7f00000002c0)=0x8)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0xb7)

04:17:04 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/91)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="900000fff00000001049", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
accept$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000540)=0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl(r4, 0x4001000008912, &(0x7f0000000600)="080db5055e0bcfe847a0716768bf639b64a11432c69a5186bcfeef9082dddaea32080e6917c2")
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x88081, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000380)=0x4, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)

04:17:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5422, &(0x7f0000000300)={0x0, "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"})

04:17:04 executing program 4:
syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00')
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400c02, 0x0)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x200000, 0x0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, 0x453, 0x10, 0x70bd28, 0x25dfdbfd, "56afe6d1e7879c2e36d299337337202e17047053f938f4fd1d287711eb6c56daca6038ab46e5c61456cbe0a49e2729824c61621db71562b0db14a9a56a898a360146da1bd15ef5e38cfe624e16e0c2a13f6b655532bbce0be62ffec650dfca344b58df90c5d9ff19df6cd110fdb483eef9683bc831719c61f02a846a5fe9fc57067e7591e90e41e5541fadf63cd56304b820e77089bd0355d6762d45991ee11519972bf4be4cc8b9454c3f7678b0c4f1f75dab50d75ff6322344bf1aeb5c0060efc8d40bd345c7d2b877fa733aae7942415189a59efef1dab3f43a2f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x4080}, 0x20891)
ioctl$TIOCL_PASTESEL(r3, 0x5412, &(0x7f0000000000))
r5 = dup3(0xffffffffffffffff, r1, 0x80000)
ioctl$PIO_FONT(r5, 0x4b48, &(0x7f0000000100)="14000000")
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000380)={[{0x4, 0xac, 0x1b, 0x7, 0x0, 0x2, 0x40, 0x7f, 0x1, 0x40, 0xdc, 0x7, 0x1}, {0x80000000, 0x7, 0x1, 0x4, 0x6, 0x2f, 0x0, 0x80, 0x8, 0x1a, 0x3, 0x80, 0x5}, {0xff, 0xff, 0x8, 0x0, 0x81, 0x3, 0x8, 0x5, 0x1, 0xd2, 0x3, 0x0, 0x1f}], 0x200})

04:17:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000100)={0xe01f, 0x0, 0x22, 0x0, 0x7, 0x9, 0x3, 0x9, 0x400, 0x8, 0xfa, 0x3, 0x7, 0x87b, &(0x7f0000000000)=""/237, 0xffff, 0x200, 0x1000000af})
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/187)

04:17:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5423, &(0x7f0000000300)={0x0, "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"})

04:17:04 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000fc030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:04 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x20200, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000100)=""/80)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)

04:17:04 executing program 4:
getgid()
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x2, 0xd, 0x8, 0xd, 0xb, 0x87d2, 0x3, 0x140, 0x1})
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000000)={0xeef, [0x5, 0x5, 0x401, 0x81, 0x100, 0xf4df, 0xfc00, 0x2, 0x3, 0x7, 0x0, 0x101, 0x80, 0xe8cd, 0x2, 0x4, 0xd774, 0xd34, 0x5, 0xffff, 0x5, 0x9, 0x5, 0xffff, 0xbdbd, 0x0, 0x8, 0xd28, 0x400, 0x6, 0x20, 0x67, 0xfff, 0x1b5, 0x7ff, 0x7f, 0x1, 0x8, 0x101, 0x0, 0x4, 0x7, 0x5, 0xd612, 0x1, 0x1b, 0x7fff], 0x8})

04:17:04 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5424, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:04 executing program 1:
r0 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x40)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x140, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fffffff, 0x4, 0x100, 0x2f, 0x8, 0x10001], 0x6, 0x400, 0xffffff25, 0xe0, 0x80000001, 0x8, 0x954, {0x0, 0x3ff, 0x9, 0x2, 0x0, 0x2, 0x4, 0x3, 0x3, 0x3, 0x1, 0x8001, 0x7, 0x9, "0895c5fa4bad9cbc9bed387495ba7c6dbbf47be6c5f272e8715e5a82472f668e"}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x5452, &(0x7f0000000200)="9b")

[  949.935581][   T26] audit: type=1804 audit(1582431424.908:573): pid=17494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1015/bus" dev="sda1" ino=16623 res=1
04:17:05 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x6f, 0x400000)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$int_in(r5, 0x5421, &(0x7f0000000300)=0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x3, 0xb, 0x4, 0x1080008, 0xda73, {0x0, 0x7530}, {0x3, 0xc, 0xc3, 0x0, 0x20, 0x8, "cd623aa7"}, 0x400, 0x3, @fd=r4, 0x101, 0x0, r6})
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

04:17:05 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x40000fe030000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  950.126817][   T26] audit: type=1804 audit(1582431424.908:574): pid=17494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1015/bus" dev="sda1" ino=16623 res=1
04:17:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5425, &(0x7f0000000300)={0x0, "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"})

04:17:05 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x1000, 0x400000)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000440)=0x1)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000700)=""/103, 0x67}], 0x2}, 0x0)
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000080))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
io_setup(0x4, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f00000024c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}])
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x8200)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
io_cancel(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x7, r4, &(0x7f0000000280)="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", 0xfd, 0x5, 0x0, 0x1, r5}, &(0x7f00000003c0))
r6 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xae1d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r9=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000100)=0x8, 0x4)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
fcntl$dupfd(r10, 0x0, r11)

04:17:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x14, &(0x7f00000000c0)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r5=>r4, 0x0, 0x7, [0x0, 0x3, 0x9, 0x0, 0x483, 0xe10, 0x9]}, &(0x7f0000000040)=0x16)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={r5, @in={{0x2, 0x4e23, @remote}}}, 0x84)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

[  950.429542][   T26] audit: type=1804 audit(1582431425.408:575): pid=17862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1016/bus" dev="sda1" ino=17249 res=1
04:17:05 executing program 0:
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={@null='               \x00', 0x8, 'wg1\x00'})
ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f00000000c0)={{{0xe}}, 0xbb, 0x2, &(0x7f0000000000)="d886bf92b71915e04f918d62002eb44efeeffd68284c47bae4fcd2b1deccffeb3b452dfec29bb3c6e549e05dfa97cb87daee0bf260f466640cd10cfbb4917216eb41ed39bdc3396a5f3b093d284c69bb2612720b0e8b76faf57c7509352365cc57170378aef2a71fbe68def4daf9ad962c7d13a900aadb984cb6325dbb6d22373335e46457d775643c51dae260dc844068611195365b599c8052369a2b3052b6be425d20b017e4d3d6fba8aae92ca01da8d8f900edee1bc12733a0"})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
signalfd(r1, &(0x7f0000000100)={[0x5]}, 0x8)
ioctl$PIO_FONT(r4, 0x4b4b, &(0x7f0000000200))

04:17:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5427, &(0x7f0000000300)={0x0, "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"})

[  950.541389][   T26] audit: type=1804 audit(1582431425.408:576): pid=17862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1016/bus" dev="sda1" ino=17249 res=1
04:17:05 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x104000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20040, 0x0)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x82c40, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r10}, @CGW_SRC_IF={0x8, 0x9, r9}]}, 0x24}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x11, 0x800000003, 0x0)
bind(r12, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r14}, @CGW_SRC_IF={0x8, 0x9, r13}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'wg1\x00', <r15=>r13})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'team0\x00', <r16=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001b80)={@empty, @local, <r17=>0x0}, &(0x7f0000001bc0)=0xc)
r18 = socket$netlink(0x10, 0x3, 0x0)
r19 = socket(0x11, 0x800000003, 0x0)
bind(r19, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r19, &(0x7f0000000040)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r21}, @CGW_SRC_IF={0x8, 0x9, r20}]}, 0x24}}, 0x0)
r22 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r22, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r22, 0x0, 0x10, &(0x7f0000001c00)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000001d00)=0xe8)
accept4$packet(0xffffffffffffffff, &(0x7f0000002180)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000021c0)=0x14, 0x800)
r25 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r25, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r25, 0x8933, &(0x7f0000002200)={'team0\x00', <r26=>0x0})
r27 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r27, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r27, 0x0, 0x10, &(0x7f0000002240)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000002340)=0xe8)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x820e0244}, 0xc, &(0x7f0000002700)={&(0x7f0000002380)={0x370, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r20}, {0x1d0, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0x1, 0x5}, {0xb4a9, 0x0, 0x8, 0xff}, {0x0, 0x1, 0x1f, 0x7fffffff}, {0x8, 0xbb, 0x0, 0x7f}, {0x4, 0x5, 0x81, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000055)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

[  950.947353][   T26] audit: type=1804 audit(1582431425.928:577): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1017/bus" dev="sda1" ino=16541 res=1
04:17:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5428, &(0x7f0000000300)={0x0, "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"})

04:17:05 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000000)="f6aca7dcd3ed389d7d98322c483963cbf02715811bb98900e8c99408baa569ee2a62e8a49afecc315217fed245b97dd1c195d3bc8c56d2428e1aa62f7bfff7d25b2fa7ecedef01097cf8bd16cc07205fb0a2cf9aac6ad6316a07d299472d1c7cb1d83190df399466bfcd62026fdd28bad9492f8064bc82305d6c8892bd2aad773ee37a15094ee0ad47e51123137a21c933dacd00b6fa955614eda01f98d5078fc161facd2cf45d4bf1fd6b1c1c3cfad1117900155b62fd86055ef3c0855e0f81d2b12f49dc87ffec28ab8e21107e7edd304adc604f76d02f3996e4595825875f5c2a4ab7db4794d6f853ff306846bce71815b5d720ec8b70efe91c90ab50cb9108081cb40fe820ba09d52ab2b06934ab324192")

[  950.994037][T18456] xt_CT: You must specify a L4 protocol and not use inversions on it
[  951.080802][   T26] audit: type=1804 audit(1582431425.948:578): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1017/bus" dev="sda1" ino=16541 res=1
04:17:06 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
fcntl$getownex(r0, 0x10, &(0x7f0000000000))

04:17:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5429, &(0x7f0000000300)={0x0, "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"})

04:17:06 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x5a00000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000000))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:06 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080))
recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/115, 0x73}], 0x5, &(0x7f0000000440)=""/255, 0xff}, 0x4}, {{&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/49, 0x31}, {&(0x7f0000000600)=""/75, 0x4b}, {&(0x7f0000000680)=""/56, 0x38}, {&(0x7f00000006c0)=""/216, 0xd8}], 0x4, &(0x7f0000000800)=""/72, 0x48}, 0x81}, {{&(0x7f0000000880)=@ipx, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000a80)=""/137, 0x89}], 0x3, &(0x7f0000000b80)=""/114, 0x72}, 0x9}, {{&(0x7f0000000c00)=@isdn, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000c80)=""/138, 0x8a}, {&(0x7f0000000d40)=""/222, 0xde}, {&(0x7f0000000e40)=""/128, 0x80}, {&(0x7f0000000ec0)=""/171, 0xab}], 0x4, &(0x7f0000000fc0)=""/41, 0x29}, 0x80000001}], 0x5, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001140)={0x3, &(0x7f0000000240)=[{}, {}, {}]})
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
accept4$unix(r3, &(0x7f0000001180), &(0x7f0000001200)=0x6e, 0x80000)
r4 = socket(0x40000000002, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001500)={<r6=>r5})
getsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000001340)=""/230, &(0x7f0000001640)=0xe6)

[  951.537349][T18783] xt_CT: You must specify a L4 protocol and not use inversions on it
04:17:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5437, &(0x7f0000000300)={0x0, "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"})

04:17:06 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f00000000c0)="abb3dd32ae2ad453882d87ed9acc27d1078d7991cdfbf1550c9a0bd0d19ad29ac21ac67d583701166e7407c3bc7ecc6975e97e382adba3c58eed25fbc41be3befb0140c64e511ae548e91fdbb70531d30848034957274a6a35dd73da5cc2c82368418b55bc76205690fceae8a0a9ac49bc2a05b15cad127e6ecaf2fcc0d53b3c357d668d2abbb9e4c9237c78c890a35150d4040d981d1a6a")
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="b2cdccfb574f56ff0ad12daacc45fc9f3c33f1f1ec988f003c928372029ebaf55f902376293fce945bab63ce17806dd6ade0884d2f174efa949c08822df5da8592f0514eb8d182e20a5a8462f069c12a4d61bab2f42b95679fbcc4cb29742594374fa3186f5602d7ce957021e0e8f04a13cb542e07a9333fe62eab3f3aa9898afcd78a612f72e75d7e581f7ba6")

04:17:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x7f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x88c5}, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x28280, 0x2c)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000001c0)={0xa, {0x5, 0xe2, 0x9}}, 0xa)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:06 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x5452, &(0x7f0000000300)="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")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2d)

04:17:06 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x6002000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5441, &(0x7f0000000300)={0x0, "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"})

04:17:07 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000180)={0x5, 0x0, 0x4cc, 0x47d})
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x400080, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x20000)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

04:17:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, @tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, @l2tp={0x2, 0x0, @broadcast, 0x3}, @sco, 0x3, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000080)='veth0_to_batadv\x00', 0x20, 0x2000000000002, 0x8af3})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:07 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x7160, '\r\fR', 0x6, 0x1f})

[  952.107941][T19444] xt_CT: You must specify a L4 protocol and not use inversions on it
04:17:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5450, &(0x7f0000000300)={0x0, "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"})

04:17:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5451, &(0x7f0000000300)={0x0, "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"})

04:17:07 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0xff03000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:07 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/179)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r3, 0x5412, &(0x7f0000000000))
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00')
ioctl$PIO_FONT(r4, 0x4b4b, &(0x7f0000000000))

04:17:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x80c1)

04:17:07 executing program 1:
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x4, {0x100000, 0x0, 0x4, 0x10001}})
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)

04:17:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5452, &(0x7f0000000300)={0x0, "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"})

[  952.777838][T19861] xt_CT: You must specify a L4 protocol and not use inversions on it
04:17:07 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000))
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x5, 0xc00, 0x6, 0xfffc, 0x3})
ioctl$PIO_FONT(r0, 0x5452, &(0x7f0000000200)="9b")

04:17:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8800, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fsync(r1)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='/dev/snapshot\x00'}, 0x10)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000280)={{r3}, 0x523, 0xfffffffffffffff7, 0x5})
ftruncate(r0, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)=0x4)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040))
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000100)="63128b76c1ee036b3da7cd13fac8f2b513dde76450490079af7b6e6256f94a6f040940b15570a5b7249f0b383e2a54ef0ae3fc58c7e89a0a2dacf556c7f4cdaa34c1e36e3b476bbfccfb18c4e5b7e90a5cc82c24405cf1f1bdd653ead9b51b106ee7cb000e43a1814c6ce23e9650a695b2105cb7d26558bb8c1300000000000000000000000000000000000000000000000000009d3111c937e02acb35b54e41b8895a39f96f476bc36f8e774e5ffd1bb37f0b275e4a89e79f3b5a0f020cf982650b2b72701efcdf4f27e3c1e46e3be06a849976")

04:17:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x545d, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:08 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x2, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:08 executing program 4:
r0 = socket(0x0, 0x6, 0xdc)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200))

[  953.313904][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  953.313921][   T26] audit: type=1804 audit(1582431428.288:585): pid=20384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1021/bus" dev="sda1" ino=17537 res=1
[  953.439336][   T26] audit: type=1804 audit(1582431428.298:586): pid=20384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1021/bus" dev="sda1" ino=17537 res=1
04:17:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5460, &(0x7f0000000300)={0x0, "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"})

04:17:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000040)="4ac0bd2bea736d9896672800f61b7a5c54c3ba35a4d9347c2a3d0682d9e9f6")

04:17:08 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000080)="4caaa00900a99a4a934b3404355373953724749f5bd51dabb0eb72ff07541f5acdfbf7a6c6252b84f53395d420c5bd9963f8cfd36ff69db43fdfb2b6041900001f5e3f5492767b56eafd051a39c3cb0a7e9e69fb099082f1affb260b060ca804f6")

04:17:08 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x3, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:08 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="a783c13da8dfe2767643585566adf3b2826227bbfcc9673db243681e2fc12891b25070cbfca10a495372946d04b80828e0deb5dc1b0e81bb29f8a919189a97875cca0a62e536336c03d282091c29dd45044b44de02c409aa1729a389a0b43a909aef20332b1b5e15cbc5bf56bd83800b9c45613d7700dd99dca5a9b67bd09c65e7a70122fbe372aded9e79680b79a2796ee894e1e6161a134188806f46742e6cafbb35f3", 0xa4, 0x100000001}, {&(0x7f0000000140)="8546c5e15a6469b2eeccd32c54f25b3abf1bb8227c7d437ae18d40497c9ef9306603b1ff2b89a74883e67bcc974a5d703d7ea2ea10f50a20b1b644d692b76aa94e2e2df474c175a02d777affd14d03a0c9e5b778b6328fa19afe96912b29b09993b1581611be9031ff585e90b4793c5065a82bec5a5fa6296932cb45033e52659ea8478af8e6b579ac007d1a8b7147b8f29a9ffe937558b53da7227594c329ad8141a5eabb24fabe4d71c69002b987dcd03f53318f8455b987110ae9b21a521433a327def4559f451719e2278cc0f3122873f1a5e9ef013717a978e36ff1952ab728399fc030c9195003cd7ae895202a30a4266e145ed107", 0xf8, 0x3}, {&(0x7f0000000240)="df3c11e3ab8f6eebf8ff7ab8c4db90a6e8f38ed648d30a5f903d7a09ad554a4bb017689f49524d3d18103520b6c4d389f6d8c563f648f64be3e9c692824b5ea40f2d46ec1ca3e4e3907ad23a62e3768fd757dc", 0x53, 0xfb}], 0x2808800, &(0x7f0000000340)='vmnet1\x00')

04:17:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5600, &(0x7f0000000300)={0x0, "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"})

[  953.830561][   T26] audit: type=1804 audit(1582431428.808:587): pid=20679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1022/bus" dev="sda1" ino=16630 res=1
04:17:08 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r2, 0x4b48, &(0x7f0000000000)="00918c00000000005765aa980400ce77595a4aa7612bc34e4846edd57e3e0e00dd")

[  953.876341][T20681] nfs4: Unknown parameter 'vmnet1'
[  953.891929][   T26] audit: type=1804 audit(1582431428.818:588): pid=20679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1022/bus" dev="sda1" ino=16630 res=1
04:17:09 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5601, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  954.248301][   T26] audit: type=1804 audit(1582431429.228:589): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1023/bus" dev="sda1" ino=16630 res=1
04:17:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5602, &(0x7f0000000300)={0x0, "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"})

04:17:09 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x80000000, 0x200, {}, {0x5, 0xd, 0x3f, 0x2, 0x9d, 0x2, "4a24a58a"}, 0x1ff, 0x3, @fd=r1, 0x1000})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$PIO_FONT(r2, 0x4b48, &(0x7f0000000200))

04:17:09 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000280)=0x10, 0x0)
sendto$inet(r2, &(0x7f00000002c0)="b7e33df8eb99fe77b7c1c71e2ae5f21d2c19ec536cb2160666c20da5f2a0c03ef31e75", 0x23, 0x80, &(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
read$char_usb(r3, &(0x7f00000001c0)=""/150, 0x96)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r6 = fcntl$dupfd(r4, 0x406, r5)
ioctl$PIO_FONT(r6, 0x4b4b, &(0x7f0000000080)="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")

[  954.338575][   T26] audit: type=1804 audit(1582431429.268:590): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1023/bus" dev="sda1" ino=16630 res=1
04:17:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x20c, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x1f8, 0x7f, "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"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="8793d17b9fe06217d41904fa785280425998eb4c803eb106662543abc78602ffd031f6efc81816658b8b7db3da11c263095780edae095280895fc7e029b0fa", 0x3f}, {&(0x7f0000000040)}], 0x2)
ioctl$PIO_FONT(r2, 0x5452, &(0x7f0000000200)="9b")

04:17:09 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x5, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5603, &(0x7f0000000300)={0x0, "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"})

04:17:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x2, 0xe, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
rt_sigprocmask(0x2, &(0x7f0000000040)={[0x59]}, &(0x7f0000000100), 0x8)

04:17:09 executing program 0:

[  954.790354][   T26] audit: type=1804 audit(1582431429.768:591): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1024/bus" dev="sda1" ino=16541 res=1
04:17:09 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5605, &(0x7f0000000300)={0x0, "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"})

[  954.985303][   T26] audit: type=1804 audit(1582431429.798:592): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1024/bus" dev="sda1" ino=16541 res=1
04:17:10 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x6, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:10 executing program 4:
getegid()
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x0, 0x1000, 0x400, 0x1, 0x0, 0x0, 0x1})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x35, @broadcast, 0x4e24, 0x1, 'rr\x00', 0x16, 0x6, 0x2d}, 0x2c)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)="86bf92a1c501be42599b5d7dfddceb7656105e80068ca5cf87111683957d657a79daab516e32cc05")

04:17:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5606, &(0x7f0000000300)={0x0, "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"})

[  955.300535][   T26] audit: type=1804 audit(1582431430.278:593): pid=21633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1025/bus" dev="sda1" ino=16608 res=1
04:17:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5607, &(0x7f0000000300)={0x0, "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"})

04:17:10 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x7, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:10 executing program 0:
r0 = semget$private(0x0, 0x7, 0x487)
semop(r0, &(0x7f0000000000)=[{0x3, 0x40}, {0x0, 0x3, 0x1000}, {}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff])
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x8000, 0xff, 0x8, 0x94, 0x3])
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b4b, &(0x7f0000000200))

04:17:10 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000000)="00006fba4a6d111c426837e4079a66af224062be19c706000000769de6")

[  955.617841][   T26] audit: type=1804 audit(1582431430.598:594): pid=21846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1026/bus" dev="sda1" ino=16614 res=1
04:17:10 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5608, &(0x7f0000000300)={0x0, "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"})

04:17:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0xa, 0x1})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:10 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x8, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:10 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xafdfacb76989fd01, 0x0)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040))

04:17:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x5609, &(0x7f0000000300)={0x0, "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"})

04:17:11 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0xa, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:11 executing program 4:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f0000001140)="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")
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x10000, [0x4, 0x3]}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x4, 0x400}, {0x0, 0xfffb}, {0x0, 0x4}, {0x401, 0x2}, {0x3, 0x8}]})

04:17:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x560a, &(0x7f0000000300)={0x0, "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"})

04:17:11 executing program 0:
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)={0x0, 0x8, 0x4, 0x40020000, 0x8, {}, {0x3, 0x2, 0x81, 0x5, 0x3, 0xff, "fd78e21b"}, 0x7, 0x3, @userptr=0x63d, 0x9, 0x0, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}}, &(0x7f0000000580)=0x84)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b4b, &(0x7f0000000200))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/33)

04:17:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x560b, &(0x7f0000000300)={0x0, "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"})

04:17:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x210040, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x5, 0x6, 0x5, 0x3, 0x0, 0x81, 0x1f, 0xb4, 0xe0, 0x1f, 0x4, 0x2}, 0xe)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

04:17:11 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0xb, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x560c, &(0x7f0000000300)={0x0, "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"})

04:17:11 executing program 4:
eventfd(0x400)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r1, 0x4b48, &(0x7f0000000200)="5313f1bfc1d01d76ea84e2524d7977a7f463a99d33e886c6261d9ee21dfd0c77886a784db4b0e64e74ffba28703ef7d27633eca36e7d12d26bd4f16b71f51e88a52165d40a2473e0b01957a9f72007fe1d4ddaec9a5f9591abb1d40fe0f781aab2d8566a122d659b70c339e3384eb9fe885b32e952e0ae3a7bb7101141d083c43632e660e55e01b032ef9ed91648ba0e6bacf13e81bfc34958f45698e560380da59c220e002204f335053ded5e399028e9e5dc000000000000000000000000017e0c7f7d76531f99")
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xa10000, 0xa7c1, 0x3, <r3=>r0, 0x0, &(0x7f0000000040)={0x9a090f, 0x6, [], @p_u8=&(0x7f0000000000)=0x3f}})
r4 = dup(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
ftruncate(r5, 0x8200)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r6, 0x4606, &(0x7f0000000340)={0x280, 0x1000, 0x30, 0x3d0, 0x29b, 0x3, 0x0, 0x2, {0x80000001, 0xdce6}, {0x7, 0x401, 0x1}, {0x8000, 0x13}, {0x90b, 0x6, 0x1}, 0x2, 0x1, 0x0, 0x9, 0x0, 0x5a7, 0x3, 0x0, 0x6, 0x3, 0x2, 0x4, 0xc, 0x4, 0x1, 0x8})
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e)

04:17:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000000)="22018e35da98416e8edd0076efe1d0541f5408cc797ac1adbe7d20a02a1a83516c81ca3b2da83f7c2454c2b93e663879c7f6a1e5873a5e0569174cd99af8322528bff0178a67c346cbe30e626e462dd2e02778d464396eb90c217f0f951b2372d2af29124ccdc87dfaaceff762b832add872")
kexec_load(0x7fffffff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="1b7c23a5f57755d927ab2c511b854137d6468fbcb1c73537b062b0f440a76caeccef609643b1335268c396e1dab4b091a8c5fbcf9679dc80b43a1c0a22f2bbf9d11d9df3e0c782c3debe0190509022c84d7368d6b95071e94ba60c82d669761178fb275a26746a", 0x67, 0x81, 0x2}, {&(0x7f0000000100)="c79d259d129f6d4b895e63775c96b274036a75372006685c6898c603bf3aa6aad4f9bc585b95b1c0a37c7b559b8d8a6d60d9003181c684285343bfae560321e532d2b91104e1436eccbb0dc0893ad6444476a2124264c2949437a5b8357db575", 0x60, 0x40, 0x6800}], 0x30000)

04:17:12 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0xc, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x560d, &(0x7f0000000300)={0x0, "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"})

04:17:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x401)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x560e, &(0x7f0000000300)={0x0, "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"})

04:17:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

04:17:12 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0xd, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:12 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x18000, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000000c0)=0x3, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000000)={0x9, 0xa, 0x4, 0x40000, 0x3, {}, {0x3, 0x1, 0x0, 0x80, 0x2, 0x40, "6ef9e716"}, 0x2, 0x0, @fd, 0x4748, 0x0, <r4=>0xffffffffffffffff})
ioctl$PIO_FONT(r4, 0x4b48, &(0x7f0000000200))

04:17:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x560f, &(0x7f0000000300)={0x0, "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"})

04:17:12 executing program 0:

04:17:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x6364, &(0x7f0000000300)={0x0, "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"})

04:17:12 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0xf, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x420080)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006, 0x0, 0x0, 0x1}]}, 0x10)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
signalfd(r3, &(0x7f0000000080)={[0x5]}, 0x8)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
prctl$PR_SET_THP_DISABLE(0x29, 0x0)

04:17:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000040)={0x200044})
bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0x3f, 0x4c, 0x0, 0x7}, 0x6)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x8912, &(0x7f0000000300)={0x0, "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"})

04:17:13 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x10, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2})

04:17:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x3, 0x80000})

04:17:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x8933, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  958.348508][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  958.348524][   T26] audit: type=1804 audit(1582431433.328:608): pid=23958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1033/bus" dev="sda1" ino=16631 res=1
04:17:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x400454ca, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:13 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x11, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x484240, 0x4)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8001, 0x2)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x4)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x2, {0x6a4c, 0x5, 0x7ff, 0x7ff}})
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000100)={0x4, 0x5, 0x4, 0x40, 0x2, {}, {0x5, 0x0, 0xbf, 0x9, 0xc9, 0x1b, "35bd285a"}, 0x9, 0x2, @userptr=0x2, 0x7, 0x0, <r6=>0xffffffffffffffff})
ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000180))
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r7, 0x5412, &(0x7f0000000000))
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r8, 0x5412, &(0x7f0000000000))
ioctl$TIOCGSID(r8, 0x5429, &(0x7f00000001c0)=<r9=>0x0)
wait4(r9, &(0x7f0000000200), 0x40000000, &(0x7f0000000240))
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000040))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:13 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r2, 0x6c, 0x400, 0x99, 0x2, 0x5}, &(0x7f0000000040)=0x14)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

[  958.806849][   T26] audit: type=1804 audit(1582431433.788:609): pid=24276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1034/bus" dev="sda1" ino=16631 res=1
04:17:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x40049409, &(0x7f0000000300)={0x0, "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"})

[  958.938388][   T26] audit: type=1804 audit(1582431433.788:610): pid=24276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1034/bus" dev="sda1" ino=16631 res=1
04:17:13 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x12, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

[  959.171640][   T26] audit: type=1804 audit(1582431434.148:611): pid=24588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1035/bus" dev="sda1" ino=16528 res=1
04:17:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x40086602, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00002fefc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000164000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x1, &(0x7f0000e4b000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}])
r3 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
recvfrom$llc(r3, &(0x7f0000000000)=""/56, 0x38, 0x10120, &(0x7f0000000080)={0x1a, 0x13, 0xca, 0x2, 0x8, 0x57, @local}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0)=0x10001, 0x4)
ioctl$PIO_FONT(r4, 0x4b4b, &(0x7f0000000040)="79ded00597800c9450d14ff19281baae053d21c88dca851d7c0b9d104c5b6078cfcdaf570300000000000000642a7760a3536c1d3baf959100a0")
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r6, 0x5412, &(0x7f0000000000))
ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000100))

[  959.269264][   T26] audit: type=1804 audit(1582431434.188:612): pid=24588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1035/bus" dev="sda1" ino=16528 res=1
04:17:14 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x13, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4008ae48, &(0x7f0000000300)={0x0, "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"})

04:17:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x40186366, &(0x7f0000000300)={0x0, "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"})

04:17:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000))
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r2, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000))
ptrace(0x10, r3)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b")
ptrace$getregset(0x4204, r3, 0x46e62b7f, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000})
rt_tgsigqueueinfo(r2, r3, 0x1, &(0x7f0000000080)={0x2d, 0xffff5bf3, 0xfff})

[  959.646198][   T26] audit: type=1804 audit(1582431434.628:613): pid=24901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1036/bus" dev="sda1" ino=16649 res=1
[  959.761709][   T26] audit: type=1804 audit(1582431434.668:614): pid=24901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1036/bus" dev="sda1" ino=16649 res=1
04:17:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x401c5820, &(0x7f0000000300)={0x0, "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"})

04:17:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = socket$caif_stream(0x25, 0x1, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x8)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}})

04:17:14 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x14, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:14 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
fcntl$setpipe(r1, 0x407, 0x2)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

04:17:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4020940d, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

[  960.092196][   T26] audit: type=1804 audit(1582431435.068:615): pid=25157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1037/bus" dev="sda1" ino=16671 res=1
[  960.222904][   T26] audit: type=1804 audit(1582431435.078:616): pid=25157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1037/bus" dev="sda1" ino=16671 res=1
04:17:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x103201, 0x0)
socket$inet(0x2, 0x4, 0x2)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000200)={'ah\x00'}, &(0x7f00000001c0)=0x8)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20000, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0xe5de, 0x2, 0x6, 0x5})

04:17:15 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x15, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4138ae84, &(0x7f0000000300)={0x0, "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"})

04:17:15 executing program 0:
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x8000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000))
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e)
syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xdbbc, 0x100080)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(r2, 0x4b4b, &(0x7f0000000100))

04:17:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x800448d3, &(0x7f0000000300)={0x0, "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"})

04:17:15 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x16, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:15 executing program 0:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video37\x00', 0x2, 0x0)
ioctl$int_out(r0, 0x2, &(0x7f0000000340))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000040)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r2, 0x4b4b, &(0x7f0000000200))
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r4=>0x0}, &(0x7f0000000040)=0xc)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x8, 0x10001, 0x3, 0x20, 0x80000001, r4})
ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000100))

04:17:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xd9db)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:15 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x80045432, &(0x7f0000000300)={0x0, "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"})

[  960.915114][   T26] audit: type=1804 audit(1582431435.888:617): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1039/bus" dev="sda1" ino=16662 res=1
[  960.954649][T25759] QAT: Invalid ioctl
04:17:16 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x17, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000040)={0xb8, 0x6, 0x7, 0x3, 0xffff8000, 0xd76, 0x73, 0x7fffffff, 0x7, 0x40, 0xbc, 0x2, 0xc000, 0x0, &(0x7f0000000280)=""/4096, 0x2, 0x1, 0x100000000})
r2 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@typedef={0xa, 0x0, 0x0, 0x8, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1f}}, @restrict={0x6}]}, {0x0, [0x30, 0x2e, 0x30, 0x0, 0x30, 0x61, 0x2e]}}, &(0x7f0000000140)=""/131, 0x5d, 0x83, 0x1}, 0x20)
fsetxattr(r3, &(0x7f0000001280)=@known='com.apple.system.Security\x00', &(0x7f00000012c0)='\x00', 0x1, 0x2)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1)

04:17:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x80045438, &(0x7f0000000300)={0x0, "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"})

04:17:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x80045440, &(0x7f0000000300)={0x0, "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"})

04:17:16 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x18, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x8004745a, &(0x7f0000000300)={0x0, "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"})

04:17:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
fsmount(r1, 0x0, 0x7e)

04:17:16 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x80086301, &(0x7f0000000300)={0x0, "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"})

04:17:16 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x19, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x80dc5521, &(0x7f0000000300)={0x0, "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"})

04:17:17 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r5, &(0x7f00000017c0), 0x3da, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9f0000, 0x6, 0x3, r3, 0x0, &(0x7f0000000000)={0x49e11511ef5627c, 0x9, [], @ptr=0xffffffffffff8000}})
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000040)="e1eb3ace1d28fed0748386f11a46c24c8f8cb2c44837d70b18803d9c14fc037168437efc4ddca4cd6abd2e25109b34b0f9170093bebed0cf187f328af2e634a6fb18a5054c9d16e10451727abd7b70bc154e274d854d77871d5446b0aef2b7ea469d45984e4ce793fb1070b70c7f6e80ad86ccea9f697796af12f27cfa6641a80d0bc99d049e9277bc84594509ec45d1")

04:17:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x8, 0x4, 0x81, 0x0, 0x4, "0d6d9ccbe178648f0b74fb1bf29e15795761ed", 0x1f, 0xc5})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0xc0045878, &(0x7f0000000300)={0x0, "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"})

04:17:17 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x21, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000080)="8e26beefac8d1befec3cbe3ae0c0d45cd2d5514fb5d0357944f1")

04:17:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0xc0045878, &(0x7f0000000300)={0x0, "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"})

04:17:17 executing program 0:
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x83000000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@local, 0x4c})
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000200))

04:17:17 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x105000, 0x0)
read$dsp(r0, &(0x7f0000000040)=""/196, 0xc4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x2010, r2, 0x3)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000001c0)={0x8, 0x5, 0x4, 0x4})
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b48, &(0x7f0000000140)="1dd2904974d1bb5a7522567df3b62e4f033bf21b7a55c9d6cd577f68b83eac8935ac3dd13f35b5a419385e13ff659564067dabbad73c050407983e4be3f4a36aef848856e03fb71d3c01d458f20924fdcecc05")

04:17:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0xc00c642e, &(0x7f0000000300)={0x0, "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"})

04:17:17 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x22, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:17 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0xc0189436, &(0x7f0000000300)={0x0, "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"})

04:17:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fff, 0x0, 0x4, 0x20000, 0x8, {}, {0x3, 0x0, 0x3, 0x9, 0x7f, 0x81, "f5e99e39"}, 0x10001, 0x1, @userptr=0x5, 0x401, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200100, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
ftruncate(r4, 0x8200)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x4, 0x4, 0x1, 0x5}, {0xb06, 0x3, 0x6, 0x8000}, {0x5, 0x92, 0x8, 0x3}, {0x0, 0x2, 0x6, 0x6}]})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010029bd7000050000000200000008000700", @ANYRES32=r3, @ANYBLOB="0800080000000000080004007f0000010c000300020000000000000008000400ffffffff08000700", @ANYRES32=r5, @ANYBLOB="08000400e0000002"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x14)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))

04:17:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5ca, 0x80c00)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r4=>0x0)
fcntl$setown(r3, 0x8, r4)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/53)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040))
r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r5)
ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead)

04:17:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0xc020660b, &(0x7f0000000300)={0x0, "e3a3d22262834520655f44fab5badd5e85abe83ec70f74e482beeb0218a32ba6acb67fd8f694e25bf5596358fb7fd8e0e32c12023a52a8c4d812fd45bb15bdac844d072c75b13d5f283191d249e6cb9e6554973aaefc786859f09999bd933a515ca430df2d2a9b0d31584a423e3d952468f41ea3ea7f3b0a3506006789a14b28c8418858f9614e1a4233291b680f99c1e596c030c5da9eff611c0ce4eeb220433b2b80d4ad231ca0a4a844095c49a6644007132d694d006665e773b2c6aadce2fe700fb34d4bca7e28d8c3e0ef8f3ec492c83f53e534788187409fcfb24bf8162da764c9f2d6f8f984698b82d6e93eaf1f16d3ec810b55b5ea90547dbe934585aa1370c753fea76358d962174c828c393631fdb223fe6c0d552be89f092bd2e3877556f1f315eb9bb7e890147610be68dcb09ad9990ae231f1a1917e88a3ba6c6459995e381156ce7f9b0f1dcfb83fe7e60b4cbad927daca5a3bc3b18c5be969e8dc792ebacf46972c3be8f411174ec0e3cf67eb636137db2ffbcb644a6fb1bf0d28b820fb5558142695dc0c22580c5550983b42e83d13195f688f09b1abfaf2ed1ca10b9bcd0749e5fe3288d02b26322eed1fafbe8715cdb3a2d89c54dd9c0ccca9b8162ccd3b69f13d5df0fced0e616f6dd6ff0740575a2120e430a207383599ab527a5d30fc2f47f93ee2d8b01df0907b1942798cf6ef572481200aca9135"})

04:17:18 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x23, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"})

04:17:18 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040))
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x3c0, 0x7, 0x9, 0x10001, 0x5, "c0e8d983f22d73df7f61e56f55f4947b477512", 0x3})
ioctl$PIO_FONT(r0, 0x4b4b, &(0x7f0000000200))

04:17:18 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x24, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

04:17:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040))
ioctl$TIOCL_PASTESEL(r1, 0x5412, &(0x7f0000000000))
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000180))
ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f00000000c0)={0xffff, 0xd, 0x3, "1f4a16684386cce887519613b0fc52341a4ecd49fee1e5dd3a14b0ac5f8acd5b7a346985ee7939517b7ac98812cc1186ba83c808453c8fc85551cd48", 0x20, "6121009aa32ddd9c6a53c6b61e748780cd04af217bd88f504d4f1956f611376105b3756633f6a616dd69552c02d1512b8edd3cad271f3a0e768fa442"})
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000080)="9cc26a7e82f2a217c837cd796f71d0aed34d9517c9fc084328e4f229e9c95fea9a14dbe80fffc9ab")

04:17:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x2, "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"})

[  963.740736][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  963.740756][   T26] audit: type=1804 audit(1582431438.718:631): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1046/bus" dev="sda1" ino=16709 res=1
04:17:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x3, "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"})

04:17:18 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8002, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x109803, 0x0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4ce)
gettid()
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x25, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x0, 0x160, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  963.904336][   T26] audit: type=1804 audit(1582431438.728:632): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir621488160/syzkaller.rY98lt/1046/bus" dev="sda1" ino=16709 res=1
04:17:18 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r0)
r1 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0x8)
socket$unix(0x1, 0x2, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

04:17:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b48, &(0x7f0000000200))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)
r2 = dup2(r1, 0xffffffffffffffff)
bind$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

04:17:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x4, "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"})

[  964.207455][T27890] ==================================================================
[  964.216171][T27890] BUG: KASAN: use-after-free in vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.223743][T27890] Read of size 1 at addr ffff8880a4a8c801 by task syz-executor.4/27890
[  964.231985][T27890] 
[  964.234335][T27890] CPU: 1 PID: 27890 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0
[  964.243013][T27890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.253081][T27890] Call Trace:
[  964.256400][T27890]  dump_stack+0x197/0x210
[  964.260758][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.266145][T27890]  print_address_description.constprop.0.cold+0xd4/0x30b
[  964.273308][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.278445][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.283591][T27890]  __kasan_report.cold+0x1b/0x32
[  964.288558][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.293827][T27890]  kasan_report+0x12/0x20
[  964.298181][T27890]  __asan_report_load1_noabort+0x14/0x20
[  964.303833][T27890]  vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.308886][T27890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  964.315145][T27890]  ? security_capable+0x95/0xc0
[  964.320025][T27890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  964.326282][T27890]  ? ns_capable_common+0x93/0x100
[  964.331337][T27890]  vt_ioctl+0x47e/0x26c0
[  964.335611][T27890]  ? complete_change_console+0x3a0/0x3a0
[  964.341390][T27890]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  964.347247][T27890]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  964.353169][T27890]  ? tty_jobctrl_ioctl+0x50/0xd40
[  964.358212][T27890]  ? complete_change_console+0x3a0/0x3a0
[  964.363873][T27890]  tty_ioctl+0xa37/0x14f0
[  964.368244][T27890]  ? tty_vhangup+0x30/0x30
[  964.372682][T27890]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  964.378959][T27890]  ? do_vfs_ioctl+0x568/0x13b0
[  964.383778][T27890]  ? ioctl_file_clone+0x180/0x180
[  964.388943][T27890]  ? __fget_files+0x359/0x520
[  964.393662][T27890]  ? ksys_dup3+0x3e0/0x3e0
[  964.398106][T27890]  ? ns_to_kernel_old_timeval+0x100/0x100
[  964.403856][T27890]  ? tomoyo_file_ioctl+0x23/0x30
[  964.408813][T27890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  964.415074][T27890]  ? security_file_ioctl+0x8d/0xc0
[  964.420204][T27890]  ? tty_vhangup+0x30/0x30
[  964.424744][T27890]  ksys_ioctl+0x123/0x180
[  964.429103][T27890]  __x64_sys_ioctl+0x73/0xb0
[  964.433722][T27890]  do_syscall_64+0xfa/0x790
[  964.438253][T27890]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  964.444178][T27890] RIP: 0033:0x45c429
[  964.448083][T27890] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  964.467805][T27890] RSP: 002b:00007f0f2868cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.476237][T27890] RAX: ffffffffffffffda RBX: 00007f0f2868d6d4 RCX: 000000000045c429
[  964.484225][T27890] RDX: 0000000020000200 RSI: 0000000000004b48 RDI: 0000000000000003
[  964.492214][T27890] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  964.500203][T27890] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  964.508192][T27890] R13: 000000000000041a R14: 00000000004c676d R15: 000000000076bf2c
[  964.516211][T27890] 
[  964.518558][T27890] Allocated by task 1548:
[  964.523020][T27890]  save_stack+0x23/0x90
[  964.527199][T27890]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[  964.532850][T27890]  kasan_kmalloc+0x9/0x10
[  964.537194][T27890]  __kmalloc+0x163/0x770
[  964.541481][T27890]  vt_do_kdgkb_ioctl+0x3d1/0xb50
[  964.546457][T27890]  vt_ioctl+0x47e/0x26c0
[  964.550715][T27890]  tty_ioctl+0xa37/0x14f0
[  964.555060][T27890]  ksys_ioctl+0x123/0x180
[  964.559505][T27890]  __x64_sys_ioctl+0x73/0xb0
[  964.564134][T27890]  do_syscall_64+0xfa/0x790
[  964.568654][T27890]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  964.574547][T27890] 
[  964.576884][T27890] Freed by task 27892:
[  964.580963][T27890]  save_stack+0x23/0x90
[  964.585241][T27890]  __kasan_slab_free+0x102/0x150
[  964.590196][T27890]  kasan_slab_free+0xe/0x10
[  964.594815][T27890]  kfree+0x10a/0x2c0
[  964.598721][T27890]  vt_do_kdgkb_ioctl+0x5b4/0xb50
[  964.603682][T27890]  vt_ioctl+0x47e/0x26c0
[  964.607941][T27890]  tty_ioctl+0xa37/0x14f0
[  964.612283][T27890]  ksys_ioctl+0x123/0x180
[  964.616625][T27890]  __x64_sys_ioctl+0x73/0xb0
[  964.621230][T27890]  do_syscall_64+0xfa/0x790
[  964.625748][T27890]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  964.631636][T27890] 
[  964.634001][T27890] The buggy address belongs to the object at ffff8880a4a8c800
[  964.634001][T27890]  which belongs to the cache kmalloc-1k of size 1024
[  964.648068][T27890] The buggy address is located 1 bytes inside of
[  964.648068][T27890]  1024-byte region [ffff8880a4a8c800, ffff8880a4a8cc00)
[  964.661258][T27890] The buggy address belongs to the page:
[  964.666923][T27890] page:ffffea000292a300 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0
[  964.676041][T27890] flags: 0xfffe0000000200(slab)
[  964.680914][T27890] raw: 00fffe0000000200 ffffea00026aa6c8 ffffea000210b1c8 ffff8880aa400c40
[  964.689515][T27890] raw: 0000000000000000 ffff8880a4a8c000 0000000100000002 0000000000000000
[  964.698107][T27890] page dumped because: kasan: bad access detected
[  964.704527][T27890] 
[  964.706864][T27890] Memory state around the buggy address:
[  964.712513][T27890]  ffff8880a4a8c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  964.720598][T27890]  ffff8880a4a8c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  964.728675][T27890] >ffff8880a4a8c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  964.736864][T27890]                    ^
[  964.740955][T27890]  ffff8880a4a8c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  964.749033][T27890]  ffff8880a4a8c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  964.757113][T27890] ==================================================================
[  964.765180][T27890] Disabling lock debugging due to kernel taint
[  964.777552][T27890] Kernel panic - not syncing: panic_on_warn set ...
[  964.784199][T27890] CPU: 1 PID: 27890 Comm: syz-executor.4 Tainted: G    B             5.6.0-rc2-syzkaller #0
[  964.794260][T27890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.804327][T27890] Call Trace:
[  964.807644][T27890]  dump_stack+0x197/0x210
[  964.812009][T27890]  panic+0x2e3/0x75c
[  964.815923][T27890]  ? add_taint.cold+0x16/0x16
[  964.820621][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.825749][T27890]  ? preempt_schedule+0x4b/0x60
[  964.830616][T27890]  ? ___preempt_schedule+0x16/0x18
[  964.835747][T27890]  ? trace_hardirqs_on+0x5e/0x240
[  964.840796][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.845924][T27890]  end_report+0x47/0x4f
[  964.850095][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.855218][T27890]  __kasan_report.cold+0xe/0x32
[  964.860085][T27890]  ? vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.865217][T27890]  kasan_report+0x12/0x20
[  964.869564][T27890]  __asan_report_load1_noabort+0x14/0x20
[  964.875219][T27890]  vt_do_kdgkb_ioctl+0xb24/0xb50
[  964.880172][T27890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  964.886403][T27890]  ? security_capable+0x95/0xc0
[  964.891247][T27890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  964.897499][T27890]  ? ns_capable_common+0x93/0x100
[  964.902538][T27890]  vt_ioctl+0x47e/0x26c0
[  964.906774][T27890]  ? complete_change_console+0x3a0/0x3a0
[  964.912489][T27890]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  964.918291][T27890]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  964.924297][T27890]  ? tty_jobctrl_ioctl+0x50/0xd40
[  964.929322][T27890]  ? complete_change_console+0x3a0/0x3a0
[  964.934965][T27890]  tty_ioctl+0xa37/0x14f0
[  964.939345][T27890]  ? tty_vhangup+0x30/0x30
[  964.943754][T27890]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  964.949998][T27890]  ? do_vfs_ioctl+0x568/0x13b0
[  964.954871][T27890]  ? ioctl_file_clone+0x180/0x180
[  964.959897][T27890]  ? __fget_files+0x359/0x520
[  964.964574][T27890]  ? ksys_dup3+0x3e0/0x3e0
[  964.969004][T27890]  ? ns_to_kernel_old_timeval+0x100/0x100
[  964.974721][T27890]  ? tomoyo_file_ioctl+0x23/0x30
[  964.979668][T27890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  964.985913][T27890]  ? security_file_ioctl+0x8d/0xc0
[  964.991015][T27890]  ? tty_vhangup+0x30/0x30
[  964.995428][T27890]  ksys_ioctl+0x123/0x180
[  964.999779][T27890]  __x64_sys_ioctl+0x73/0xb0
[  965.004387][T27890]  do_syscall_64+0xfa/0x790
[  965.009015][T27890]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  965.014894][T27890] RIP: 0033:0x45c429
[  965.018879][T27890] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  965.038582][T27890] RSP: 002b:00007f0f2868cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  965.046983][T27890] RAX: ffffffffffffffda RBX: 00007f0f2868d6d4 RCX: 000000000045c429
[  965.055039][T27890] RDX: 0000000020000200 RSI: 0000000000004b48 RDI: 0000000000000003
[  965.063009][T27890] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  965.070997][T27890] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  965.078960][T27890] R13: 000000000000041a R14: 00000000004c676d R15: 000000000076bf2c
[  965.088423][T27890] Kernel Offset: disabled
[  965.097872][T27890] Rebooting in 86400 seconds..